General
- Target 2026-08-03_47b56ac64e0d2d5dd2724ad5eeec4a40_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260804-pcafdswsey
- SHA256 39a299bea4ff81b382f82009b9e3c886dbd6fd6c176fbee32b64faf792cf8a7f
- MD5 47b56ac64e0d2d5dd2724ad5eeec4a40
- SHA1 313e62edb63ea6c6db34136a3efbcff727b4f98a
- SHA512 2e9391b02624b1e993d00c92345c775f7b7c879449aaf3175bb5bf8601e5d8663c466830da1b6bd7f0f4c49a8cf97ba35e14268dddd647a22b32c0f2ea7c43d0
- SSDEEP 24576:OhfDc6X3lQMJxr4cQFTj0OZeVJs0gH4Rz4ppQmJTwzFIbmqit:Nul1JqcQFTIOZelDRzQXJTkFIb
- TLSH T15645F11EBEF1C032C0235134DD6AD348A1B5E4B188264487BBED671D2FB15D39B2AB67
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_47b56ac64e0d2d5dd2724ad5eeec4a40_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_47b56ac64e0d2d5dd2724ad5eeec4a40_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 39a299bea4ff81b382f82009b9e3c886dbd6fd6c176fbee32b64faf792cf8a7f
- MD5 47b56ac64e0d2d5dd2724ad5eeec4a40
- SHA1 313e62edb63ea6c6db34136a3efbcff727b4f98a
- SHA512 2e9391b02624b1e993d00c92345c775f7b7c879449aaf3175bb5bf8601e5d8663c466830da1b6bd7f0f4c49a8cf97ba35e14268dddd647a22b32c0f2ea7c43d0
- SSDEEP 24576:OhfDc6X3lQMJxr4cQFTj0OZeVJs0gH4Rz4ppQmJTwzFIbmqit:Nul1JqcQFTIOZelDRzQXJTkFIb
- TLSH T15645F11EBEF1C032C0235134DD6AD348A1B5E4B188264487BBED671D2FB15D39B2AB67
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1