General
- Target 2026-07-31_768716104bf7a40df3c3138a88642864_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260731-deq1dabf43
- SHA256 3e097c9885203526081a5f61c34797a44808214f042d3f105a0576032e2b80a1
- MD5 768716104bf7a40df3c3138a88642864
- SHA1 df43e26e0d4b2178894d5f9b3f9aa0f02c011947
- SHA512 5960b2582448f60ec07d7fd3114d9cb9c833910889d708510bad7205dded69e80f5b4b910cecfaf9a921018b5a09f4b3768bd729385608d5dd6edcb7f43b2094
- SSDEEP 24576:8vrHWdZcy2Fm+WB0zQHzXCTMV87BbkjCMvGdLtbx1vudUXRpdkrmXMLZHuSwyfyC:EssoyQTyTb7mGVtbadt0zYyC
- TLSH T1A675AD1237E58035F1B36731593A93249ABAFCB29839C40E73DC666D1FB06918E64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_768716104bf7a40df3c3138a88642864_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_768716104bf7a40df3c3138a88642864_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 3e097c9885203526081a5f61c34797a44808214f042d3f105a0576032e2b80a1
- MD5 768716104bf7a40df3c3138a88642864
- SHA1 df43e26e0d4b2178894d5f9b3f9aa0f02c011947
- SHA512 5960b2582448f60ec07d7fd3114d9cb9c833910889d708510bad7205dded69e80f5b4b910cecfaf9a921018b5a09f4b3768bd729385608d5dd6edcb7f43b2094
- SSDEEP 24576:8vrHWdZcy2Fm+WB0zQHzXCTMV87BbkjCMvGdLtbx1vudUXRpdkrmXMLZHuSwyfyC:EssoyQTyTb7mGVtbadt0zYyC
- TLSH T1A675AD1237E58035F1B36731593A93249ABAFCB29839C40E73DC666D1FB06918E64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1