General
- Target 2026-08-05_f46a560b57ed28a257774bc24701eec9_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260806-cf9cnsfc69
- SHA256 f6298d0c0433cab1a3771d782671d557541ed95d52ab738dbb50ea8df776cea7
- MD5 f46a560b57ed28a257774bc24701eec9
- SHA1 63f14700f723cf5867106da9f9aadcf028176590
- SHA512 14cb635842f4c53dee42c4ae7b28956cad1410010cfc31038e8d6c97f394ae1e87ae50bda09b64de25bd414c6b942793b6936361eef1913aff804834600d2a08
- SSDEEP 24576:8vrHWdZcy2szcWC0qQHzqpTMV87BbkjCMvGdLt9x1vudUXRpdkrmXMLZHuSwyfyC:Es2/DQTmTb7mGVt9adt0zYyC
- TLSH T16675AD1237E58035F1B36731593A93249ABAFCB29839C40E73DC666D1FB06918E64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_f46a560b57ed28a257774bc24701eec9_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_f46a560b57ed28a257774bc24701eec9_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 f6298d0c0433cab1a3771d782671d557541ed95d52ab738dbb50ea8df776cea7
- MD5 f46a560b57ed28a257774bc24701eec9
- SHA1 63f14700f723cf5867106da9f9aadcf028176590
- SHA512 14cb635842f4c53dee42c4ae7b28956cad1410010cfc31038e8d6c97f394ae1e87ae50bda09b64de25bd414c6b942793b6936361eef1913aff804834600d2a08
- SSDEEP 24576:8vrHWdZcy2szcWC0qQHzqpTMV87BbkjCMvGdLt9x1vudUXRpdkrmXMLZHuSwyfyC:Es2/DQTmTb7mGVt9adt0zYyC
- TLSH T16675AD1237E58035F1B36731593A93249ABAFCB29839C40E73DC666D1FB06918E64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1