General
- Target 2026-08-06_f108f571048846ac4e6a16ecabc0dfa6_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260806-bef43avyhw
- SHA256 7867fe738ab6486520783ddbfb9250c5aa00a8749afc1ce727b6b8a8b7f73110
- MD5 f108f571048846ac4e6a16ecabc0dfa6
- SHA1 080c505f72b7eca40cb1f25be05dca9f5635ca4e
- SHA512 5ca964660fb7cea206848f38be2daf5b16b52b6c9fd04b95ec4a17c8627420250c532c3314e416b800fadbbc0fa8969eb05bcf0ccb89e9455e663c633509e160
- SSDEEP 24576:ivrHWdZcy2Pv7WREqQHzq+TMV87BbkjCMvGdLtmI8cbWhVS6QFQmM7OlgcVP576z:2saETQT5Tb7mGVt5BAE3MHcVha
- TLSH T12375BD2277E58031F1B36731593A931499BABCB29839840E73DC666D2F70A91CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_f108f571048846ac4e6a16ecabc0dfa6_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_f108f571048846ac4e6a16ecabc0dfa6_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 7867fe738ab6486520783ddbfb9250c5aa00a8749afc1ce727b6b8a8b7f73110
- MD5 f108f571048846ac4e6a16ecabc0dfa6
- SHA1 080c505f72b7eca40cb1f25be05dca9f5635ca4e
- SHA512 5ca964660fb7cea206848f38be2daf5b16b52b6c9fd04b95ec4a17c8627420250c532c3314e416b800fadbbc0fa8969eb05bcf0ccb89e9455e663c633509e160
- SSDEEP 24576:ivrHWdZcy2Pv7WREqQHzq+TMV87BbkjCMvGdLtmI8cbWhVS6QFQmM7OlgcVP576z:2saETQT5Tb7mGVt5BAE3MHcVha
- TLSH T12375BD2277E58031F1B36731593A931499BABCB29839840E73DC666D2F70A91CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1