General
- Target 2026-08-03_079b33d6c857fd9e446687d0c7ebd15a_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260804-qfcklabd27
- SHA256 2836639ca04bc2082ab1fb258656980e7167c7306a9afeedd5ac8cc61e309f74
- MD5 079b33d6c857fd9e446687d0c7ebd15a
- SHA1 46a854cffacec61be80273f11c225d0265c966a2
- SHA512 557ef4ee7e3fcdcbed0e9603987e64d2964ff16dd8076cf373308b1effd2e0a1147bacfd620a0b22319ce9306be63532e8a2edcd6d1c5267b2af650d363080cd
- SSDEEP 24576:ivrHWdZcy2Tf1W5HaQHzYuTMV87BbkjCMvGdLtlzwL5Qy3/jm+fSUK2stNOZn3gk:2s0k6QTPTb7mGVtlzwLZ/jm+fMNO
- TLSH T13375AD1237E58035F1B36731A93A931499BABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_079b33d6c857fd9e446687d0c7ebd15a_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_079b33d6c857fd9e446687d0c7ebd15a_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 2836639ca04bc2082ab1fb258656980e7167c7306a9afeedd5ac8cc61e309f74
- MD5 079b33d6c857fd9e446687d0c7ebd15a
- SHA1 46a854cffacec61be80273f11c225d0265c966a2
- SHA512 557ef4ee7e3fcdcbed0e9603987e64d2964ff16dd8076cf373308b1effd2e0a1147bacfd620a0b22319ce9306be63532e8a2edcd6d1c5267b2af650d363080cd
- SSDEEP 24576:ivrHWdZcy2Tf1W5HaQHzYuTMV87BbkjCMvGdLtlzwL5Qy3/jm+fSUK2stNOZn3gk:2s0k6QTPTb7mGVtlzwLZ/jm+fMNO
- TLSH T13375AD1237E58035F1B36731A93A931499BABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1