General
- Target 2026-08-08_b9c3c8b10f050523fb725e29f2240726_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260808-dbspss1yft
- SHA256 e0da33fbabc77f4a85b9bea35f148465e40466ea5e76e475fd6cc9b34514dc07
- MD5 b9c3c8b10f050523fb725e29f2240726
- SHA1 b3caa029f9792a772358fa51d219ce4f900ec275
- SHA512 8ad6b0733f8566e8bd24565b9260221d3f550cee224888727e0f6cf799888750993c4fdccca159503cd17ce1a49fc2291a50b17ea962bf18cfd725d436fd65c6
- SSDEEP 24576:ivrHWdZcy2NKcWzvJQHz4UTMV87BbkjCMvGdLtbT7Jckdwi6i9bNrqq4E41WFpWc:2sGuxQThTb7mGVtn7Jckdwi3N7+WTW3
- TLSH T16075BD1277E58035F2B36731993A931499BABCB29839840E73DC666D2F70691CE74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_b9c3c8b10f050523fb725e29f2240726_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_b9c3c8b10f050523fb725e29f2240726_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 e0da33fbabc77f4a85b9bea35f148465e40466ea5e76e475fd6cc9b34514dc07
- MD5 b9c3c8b10f050523fb725e29f2240726
- SHA1 b3caa029f9792a772358fa51d219ce4f900ec275
- SHA512 8ad6b0733f8566e8bd24565b9260221d3f550cee224888727e0f6cf799888750993c4fdccca159503cd17ce1a49fc2291a50b17ea962bf18cfd725d436fd65c6
- SSDEEP 24576:ivrHWdZcy2NKcWzvJQHz4UTMV87BbkjCMvGdLtbT7Jckdwi6i9bNrqq4E41WFpWc:2sGuxQThTb7mGVtn7Jckdwi3N7+WTW3
- TLSH T16075BD1277E58035F2B36731993A931499BABCB29839840E73DC666D2F70691CE74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1