General
- Target 2026-08-03_0c084220ccf6e92bf70f38c03a8f568c_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260803-dhbpvsxdke
- SHA256 0479c6ce6005b4da296625360f35f8d2cd9e217bdfa620e1f3d7090b0acea2f2
- MD5 0c084220ccf6e92bf70f38c03a8f568c
- SHA1 7322e26df923f37a6201eff122c0d4ab0edf87f9
- SHA512 6c6b28bb22bcd16ecb37ebdaae9c935436ad6c8be75e70fca9b1f32f2f7ccf8a2aa42b17a02dc1f788c3d6986407b3b15e1809712b2e272771bb695556cf8648
- SSDEEP 24576:8vrHWdZcy2szcWC0qQHzqOTMV87BbkjCMvGdLtPG9wdZt+F7jVgCRUsA7uEcWFwF:Es2/DQTNTb7mGVt4wkF73UaEcWFQ
- TLSH T10075BD1277E58035F1B36731993A931859BAFCB29839840E73DC666D2F70A918E34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_0c084220ccf6e92bf70f38c03a8f568c_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_0c084220ccf6e92bf70f38c03a8f568c_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 0479c6ce6005b4da296625360f35f8d2cd9e217bdfa620e1f3d7090b0acea2f2
- MD5 0c084220ccf6e92bf70f38c03a8f568c
- SHA1 7322e26df923f37a6201eff122c0d4ab0edf87f9
- SHA512 6c6b28bb22bcd16ecb37ebdaae9c935436ad6c8be75e70fca9b1f32f2f7ccf8a2aa42b17a02dc1f788c3d6986407b3b15e1809712b2e272771bb695556cf8648
- SSDEEP 24576:8vrHWdZcy2szcWC0qQHzqOTMV87BbkjCMvGdLtPG9wdZt+F7jVgCRUsA7uEcWFwF:Es2/DQTNTb7mGVt4wkF73UaEcWFQ
- TLSH T10075BD1277E58035F1B36731993A931859BAFCB29839840E73DC666D2F70A918E34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1