General
- Target 2026-08-03_368de38e9ee453fb7aab2604d2a9fd91_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260804-pm2bvszhkg
- SHA256 3ee6052db7fed7acf69dd07607d0f37e9ad13450ae43295ce2e938b961c328d9
- MD5 368de38e9ee453fb7aab2604d2a9fd91
- SHA1 7829f469d9642e0e5cd40c0a926e5bfae982a71d
- SHA512 75f5a2d9acf562ddfd0fb8d330d10b6b2239e35cf5be356d3dd4785bf5afc53a94f4857f5fd2c5eeff0e5389d07c59bed563ffe35038aef8429be73c3cf3d350
- SSDEEP 24576:WvrHWdZcy2fyqWarHQHzwqTMV87BbkjCMvGdLtm+VCLze7n9yWqPUehbOP36uobS:CsqLbQTjTb7mGVtZC+zgWqPUeruoMz
- TLSH T19175BD1277E58035F2B36731993A9318997ABCB29839840E73DC662D2F706D18E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_368de38e9ee453fb7aab2604d2a9fd91_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_368de38e9ee453fb7aab2604d2a9fd91_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 3ee6052db7fed7acf69dd07607d0f37e9ad13450ae43295ce2e938b961c328d9
- MD5 368de38e9ee453fb7aab2604d2a9fd91
- SHA1 7829f469d9642e0e5cd40c0a926e5bfae982a71d
- SHA512 75f5a2d9acf562ddfd0fb8d330d10b6b2239e35cf5be356d3dd4785bf5afc53a94f4857f5fd2c5eeff0e5389d07c59bed563ffe35038aef8429be73c3cf3d350
- SSDEEP 24576:WvrHWdZcy2fyqWarHQHzwqTMV87BbkjCMvGdLtm+VCLze7n9yWqPUehbOP36uobS:CsqLbQTjTb7mGVtZC+zgWqPUeruoMz
- TLSH T19175BD1277E58035F2B36731993A9318997ABCB29839840E73DC662D2F706D18E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1