General
- Target 2026-07-31_11cc77cb50e591e2d136306e5c815b1b_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260731-d22qdsca79
- SHA256 70b0ce650e34bbd7b5b50897969cff83094f409d1b55b672025a8a1b0ef2d354
- MD5 11cc77cb50e591e2d136306e5c815b1b
- SHA1 3c6067545327d026de79d3aaef7be93de4788c05
- SHA512 b70bbe517287a669b6e693c6375dad7bdbbf5c71dfd5e2194650c1ecdde04676e34fb8983025d0a8398cf34d63bf9ed148ceb73ce2892fb79203e7a32789d4fb
- SSDEEP 24576:yvrHWdZcy2Fm+WY0zQHzXtTMV87BbkjCMvGdLt4zRTTxH2qjYXzGAiGFn4w7z:mssRyQTdTb7mGVtAFYXLFj
- TLSH T11575AD1237E98035F1B36731993A931499BABCB25839C40E73DC666D2FB0691CE64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_11cc77cb50e591e2d136306e5c815b1b_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_11cc77cb50e591e2d136306e5c815b1b_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 70b0ce650e34bbd7b5b50897969cff83094f409d1b55b672025a8a1b0ef2d354
- MD5 11cc77cb50e591e2d136306e5c815b1b
- SHA1 3c6067545327d026de79d3aaef7be93de4788c05
- SHA512 b70bbe517287a669b6e693c6375dad7bdbbf5c71dfd5e2194650c1ecdde04676e34fb8983025d0a8398cf34d63bf9ed148ceb73ce2892fb79203e7a32789d4fb
- SSDEEP 24576:yvrHWdZcy2Fm+WY0zQHzXtTMV87BbkjCMvGdLt4zRTTxH2qjYXzGAiGFn4w7z:mssRyQTdTb7mGVtAFYXLFj
- TLSH T11575AD1237E98035F1B36731993A931499BABCB25839C40E73DC666D2FB0691CE64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1