General
- Target 2026-08-08_c8817d561aeb978193be8a6c5aa5c5c9_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260808-c8qq2aydqd
- SHA256 67e74cc2ed975864d52440b0a3f495b719d167b69079d6eb0c8aa88dfa08a52d
- MD5 c8817d561aeb978193be8a6c5aa5c5c9
- SHA1 fd7377284e0b7ab336076e2b99755c2deb58aa67
- SHA512 18e0b250db7f7e23f617494a68b90bc672e0687a350aa58c1d233bf0b64f143d518292fa5725dd53f871d678abfa6f9fb9fece047a1a906466c05d414939b4a5
- SSDEEP 24576:ivrHWdZcy2NKcWXvHQHzTqTMV87BbkjCMvGdLtO8ikAROpP7yrOTtoPRd:2sGqPQTmTb7mGVt2qWJ
- TLSH T1BD75AD1277E58035F2B36731993A931899BABCB29839840E73DC676D1F70691CE24B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_c8817d561aeb978193be8a6c5aa5c5c9_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_c8817d561aeb978193be8a6c5aa5c5c9_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 67e74cc2ed975864d52440b0a3f495b719d167b69079d6eb0c8aa88dfa08a52d
- MD5 c8817d561aeb978193be8a6c5aa5c5c9
- SHA1 fd7377284e0b7ab336076e2b99755c2deb58aa67
- SHA512 18e0b250db7f7e23f617494a68b90bc672e0687a350aa58c1d233bf0b64f143d518292fa5725dd53f871d678abfa6f9fb9fece047a1a906466c05d414939b4a5
- SSDEEP 24576:ivrHWdZcy2NKcWXvHQHzTqTMV87BbkjCMvGdLtO8ikAROpP7yrOTtoPRd:2sGqPQTmTb7mGVt2qWJ
- TLSH T1BD75AD1277E58035F2B36731993A931899BABCB29839840E73DC676D1F70691CE24B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1