General
- Target 2026-07-31_8158f8f43798e6570a6547254da070b2_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260731-ddekyssdna
- SHA256 8832398212bb09beab575dfe8bdc41d1077d5df718addbf4df4c3abd5b4ee1dc
- MD5 8158f8f43798e6570a6547254da070b2
- SHA1 6a2cdd62ece765ed126aa3a593cf94f10a07b3d8
- SHA512 54f007453323863209bec535a12c660af8af6b3c64c620e4fbde0888da1708635d36845dd2c71e591f9e1cc8f64b0bb4dfd63ec07d35ca950982aab3233d2c91
- SSDEEP 24576:svrHWdZcy2ukcW9b7QHzEtTMV87BbkjCMvGdLthlVeEGRBOZRTnE7/N+x6diMgQc:Us783QTYTb7mGVthHeBRUZRbgW5pQXe9
- TLSH T13B75BD2277E58035F2B36731993A931499BABCB29839840E73DC666D1F70691CE34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_8158f8f43798e6570a6547254da070b2_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_8158f8f43798e6570a6547254da070b2_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 8832398212bb09beab575dfe8bdc41d1077d5df718addbf4df4c3abd5b4ee1dc
- MD5 8158f8f43798e6570a6547254da070b2
- SHA1 6a2cdd62ece765ed126aa3a593cf94f10a07b3d8
- SHA512 54f007453323863209bec535a12c660af8af6b3c64c620e4fbde0888da1708635d36845dd2c71e591f9e1cc8f64b0bb4dfd63ec07d35ca950982aab3233d2c91
- SSDEEP 24576:svrHWdZcy2ukcW9b7QHzEtTMV87BbkjCMvGdLthlVeEGRBOZRTnE7/N+x6diMgQc:Us783QTYTb7mGVthHeBRUZRbgW5pQXe9
- TLSH T13B75BD2277E58035F2B36731993A931499BABCB29839840E73DC666D1F70691CE34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1