General
- Target 2026-08-03_0ef9e68906558be80924a6ea757c6786_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260804-qa5zysxvdv
- SHA256 046b6bd5e64ca16ecaf905bd66b1e7413fc3dab1ea14e2287a570427bb13ca5b
- MD5 0ef9e68906558be80924a6ea757c6786
- SHA1 5325a0a922c0452490bc29c3e946e83123d8589e
- SHA512 61dfdd22cce7f5668a338e14e5211f49d379e5ab3f0f06ec7d197c860b3e0bba7a7e61fee665102ef4ea93f84c0eb29ebd704308f1db020672c43d8c1adeac0c
- SSDEEP 24576:ivrHWdZcy2EqqWl7UQHzSCTMV87BbkjCMvGdLtdYohReDNCfv3wfAFx/qWb0Xb:2s1YwQT5Tb7mGVtGohIDNCffw4FEi0X
- TLSH T11075AD1237E58035F2B36731593A931499BABCB29839840E73DC666D2FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_0ef9e68906558be80924a6ea757c6786_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_0ef9e68906558be80924a6ea757c6786_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 046b6bd5e64ca16ecaf905bd66b1e7413fc3dab1ea14e2287a570427bb13ca5b
- MD5 0ef9e68906558be80924a6ea757c6786
- SHA1 5325a0a922c0452490bc29c3e946e83123d8589e
- SHA512 61dfdd22cce7f5668a338e14e5211f49d379e5ab3f0f06ec7d197c860b3e0bba7a7e61fee665102ef4ea93f84c0eb29ebd704308f1db020672c43d8c1adeac0c
- SSDEEP 24576:ivrHWdZcy2EqqWl7UQHzSCTMV87BbkjCMvGdLtdYohReDNCfv3wfAFx/qWb0Xb:2s1YwQT5Tb7mGVtGohIDNCffw4FEi0X
- TLSH T11075AD1237E58035F2B36731593A931499BABCB29839840E73DC666D2FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1