General
- Target 2026-07-21_64f398e0e2e24a9ecd0e1ee01f7e32a5_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260721-c43j2acy2p
- SHA256 2b2205bd94907685cde9b7b4bd608bebf11e8c573931f388360567b49fbe2ba4
- MD5 64f398e0e2e24a9ecd0e1ee01f7e32a5
- SHA1 72119c02802d74a60d7c1b0fbe32eae83af7e529
- SHA512 9de66bdad9192138aa8576ee26c28e8fbba7c28aebf3fbd2d3f985c272dcb9d529f5bc6d7d4d04db0f1a30dd832b73c244bf84697ebf8bc0070746f836d10b6b
- SSDEEP 24576:yvrHWdZcy2MDmW4ryQHzLBTMV87BbkjCMvGdLteEM+6gtOCNzWd4viQ049axxHPp:msU9mQTlTb7mGVtO3gPo4vit49MHl
- TLSH T12075AD2237E58035F2B36731693A931459BABCB29839840E73DC666D1FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_64f398e0e2e24a9ecd0e1ee01f7e32a5_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_64f398e0e2e24a9ecd0e1ee01f7e32a5_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 2b2205bd94907685cde9b7b4bd608bebf11e8c573931f388360567b49fbe2ba4
- MD5 64f398e0e2e24a9ecd0e1ee01f7e32a5
- SHA1 72119c02802d74a60d7c1b0fbe32eae83af7e529
- SHA512 9de66bdad9192138aa8576ee26c28e8fbba7c28aebf3fbd2d3f985c272dcb9d529f5bc6d7d4d04db0f1a30dd832b73c244bf84697ebf8bc0070746f836d10b6b
- SSDEEP 24576:yvrHWdZcy2MDmW4ryQHzLBTMV87BbkjCMvGdLteEM+6gtOCNzWd4viQ049axxHPp:msU9mQTlTb7mGVtO3gPo4vit49MHl
- TLSH T12075AD2237E58035F2B36731693A931459BABCB29839840E73DC666D1FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1