General
- Target 2026-07-22_32a4e70d7abac6ffbd6e6c4368219d83_elex_glassworm_mafia_remcos
- Size 1.1MB
- Sample260722-wl4txsel71
- SHA256 8a267b58c4393cacba44093c06d1e83ebd44989e2a563a8d3b63d9af9dfb769c
- MD5 32a4e70d7abac6ffbd6e6c4368219d83
- SHA1 69ab28b5f06adfd39678e8067865cfcb4f155c7e
- SHA512 96c243dc9718253b3dccf278886451022912974477a96569ac6aa5ee6007b85fd212fdf4fd833617f2142de3154269ae2a4f61b0a883d5300bf1fca0f8816ae3
- SSDEEP 24576:Bzk7QE+uhkNiiYEmGLTzezr8LGkOtGi/sqjnhMgeiCl7G0nehbGZpbD:sQE+QkACbTqzYHOAijDmg27RnWGj
- TLSH T17445E02ABAF0C032D13352348D6AE318A5B5F47288254487BBDD676D2F711D2CB39B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_32a4e70d7abac6ffbd6e6c4368219d83_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_32a4e70d7abac6ffbd6e6c4368219d83_elex_glassworm_mafia_remcos.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_32a4e70d7abac6ffbd6e6c4368219d83_elex_glassworm_mafia_remcos
- Size 1.1MB
- SHA256 8a267b58c4393cacba44093c06d1e83ebd44989e2a563a8d3b63d9af9dfb769c
- MD5 32a4e70d7abac6ffbd6e6c4368219d83
- SHA1 69ab28b5f06adfd39678e8067865cfcb4f155c7e
- SHA512 96c243dc9718253b3dccf278886451022912974477a96569ac6aa5ee6007b85fd212fdf4fd833617f2142de3154269ae2a4f61b0a883d5300bf1fca0f8816ae3
- SSDEEP 24576:Bzk7QE+uhkNiiYEmGLTzezr8LGkOtGi/sqjnhMgeiCl7G0nehbGZpbD:sQE+QkACbTqzYHOAijDmg27RnWGj
- TLSH T17445E02ABAF0C032D13352348D6AE318A5B5F47288254487BBDD676D2F711D2CB39B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1