General
- Target 2026-08-06_8e576de048aac0eb810cca30a79cf139_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260806-bsllpsfb37
- SHA256 1f0f550febb4c9cf41912d5da16df099b78e8cd83bb96e26e8b84effb0d8afe9
- MD5 8e576de048aac0eb810cca30a79cf139
- SHA1 bd3ac986b7dce1a4d87ed5aeb96fd827a752cb72
- SHA512 85fbf45e0764b7219ea804796ec09ff3a99246895190af6020d2b3bc4b8c22d155132a1b80f6f93d285d4201165e254e31bbb57c443329159dad86e35f97bc24
- SSDEEP 24576:WvrHWdZcy2fyqWarHQHzwqTMV87BbkjCMvGdLtQFuqpft56XUo9gz5CEAwdhg:CsqLbQTjTb7mGVtMumEzaz7a
- TLSH T1BC75AD2277E58035F1B36731993A931459BABCB29839840E73DC662D2FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_8e576de048aac0eb810cca30a79cf139_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_8e576de048aac0eb810cca30a79cf139_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 1f0f550febb4c9cf41912d5da16df099b78e8cd83bb96e26e8b84effb0d8afe9
- MD5 8e576de048aac0eb810cca30a79cf139
- SHA1 bd3ac986b7dce1a4d87ed5aeb96fd827a752cb72
- SHA512 85fbf45e0764b7219ea804796ec09ff3a99246895190af6020d2b3bc4b8c22d155132a1b80f6f93d285d4201165e254e31bbb57c443329159dad86e35f97bc24
- SSDEEP 24576:WvrHWdZcy2fyqWarHQHzwqTMV87BbkjCMvGdLtQFuqpft56XUo9gz5CEAwdhg:CsqLbQTjTb7mGVtMumEzaz7a
- TLSH T1BC75AD2277E58035F1B36731993A931459BABCB29839840E73DC662D2FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1