General
- Target 2026-07-31_3b6cf0fdd73a1736ac5d70839828117c_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260731-dstnesbh73
- SHA256 0d0c452d295746e11e12e970d040ffc6f50e3f0a16f6ac7d7ed464f5d9807284
- MD5 3b6cf0fdd73a1736ac5d70839828117c
- SHA1 b5b1de4ffd521f82cd8a5629a93253e96fa54ae3
- SHA512 84c9a809c68556565c8c3b76072dc38afcea9556cf68eb57f5392f7bde7cfb76143323f3369b68ab45d3a3cb926ed019002f9268a6407cbd918bb29762015155
- SSDEEP 24576:uhfDc6X3lQM5xr4cQFTj0OZeVJVx1vudUXRpdkrmXMLZHuSwyfy:tul15qcQFTIOZeFadt0zYy
- TLSH T19F45E01EBAF1C032C03312319D6ED358A2B5E4B188264447BBDD672D6FB15D38729BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_3b6cf0fdd73a1736ac5d70839828117c_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_3b6cf0fdd73a1736ac5d70839828117c_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 0d0c452d295746e11e12e970d040ffc6f50e3f0a16f6ac7d7ed464f5d9807284
- MD5 3b6cf0fdd73a1736ac5d70839828117c
- SHA1 b5b1de4ffd521f82cd8a5629a93253e96fa54ae3
- SHA512 84c9a809c68556565c8c3b76072dc38afcea9556cf68eb57f5392f7bde7cfb76143323f3369b68ab45d3a3cb926ed019002f9268a6407cbd918bb29762015155
- SSDEEP 24576:uhfDc6X3lQM5xr4cQFTj0OZeVJVx1vudUXRpdkrmXMLZHuSwyfy:tul15qcQFTIOZeFadt0zYy
- TLSH T19F45E01EBAF1C032C03312319D6ED358A2B5E4B188264447BBDD672D6FB15D38729BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1