General
- Target 2026-08-08_d25b0323c0c3ed8fa0cbfb1128da9b27_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260808-c5nghagk3v
- SHA256 340b39475920ac74f77f7a1f64497c9725879e12f7f7d3c64fff888bcc0b056c
- MD5 d25b0323c0c3ed8fa0cbfb1128da9b27
- SHA1 e9c06f2c82559169575cf1b9c7de40b31392228c
- SHA512 8fbeedd92a616b553d44144bc8c6573750ce5a41ab3d808567e2091d185af496f9f901702e9e3400a1d4c6262e705bf2c90ef6a0ff383722c4f51ed19e227b9a
- SSDEEP 24576:svrHWdZcy2NKcWLvHQHz9hTMV87BbkjCMvGdLtviT4PvKNK4j1cQMcZCJJ8lBez:UsGWPQTDTb7mGVtvPcK4jYcZEOjk
- TLSH T12475BD2277E58035F1B36731993A831499BABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_d25b0323c0c3ed8fa0cbfb1128da9b27_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_d25b0323c0c3ed8fa0cbfb1128da9b27_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 340b39475920ac74f77f7a1f64497c9725879e12f7f7d3c64fff888bcc0b056c
- MD5 d25b0323c0c3ed8fa0cbfb1128da9b27
- SHA1 e9c06f2c82559169575cf1b9c7de40b31392228c
- SHA512 8fbeedd92a616b553d44144bc8c6573750ce5a41ab3d808567e2091d185af496f9f901702e9e3400a1d4c6262e705bf2c90ef6a0ff383722c4f51ed19e227b9a
- SSDEEP 24576:svrHWdZcy2NKcWLvHQHz9hTMV87BbkjCMvGdLtviT4PvKNK4j1cQMcZCJJ8lBez:UsGWPQTDTb7mGVtvPcK4jYcZEOjk
- TLSH T12475BD2277E58035F1B36731993A831499BABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1