General
- Target 2026-08-08_927e29e23faa416713272a714726b617_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260808-dmyp7agn8w
- SHA256 3bfaf1522e8b3a16c6fd4978a6553ac4d73506a2f3102e5b62478606f77b32fe
- MD5 927e29e23faa416713272a714726b617
- SHA1 820d11783bf5341d8de6e72d80d5b91b6f8919e0
- SHA512 51b54cb1a7fe4b0336666a2e6854a6d4ccc71c37f5f9f021c35686be86788139a8508c6cd4cdc964d5779ed24b7785bcfc6baa85d9586fbc30ae4765f30ed8e0
- SSDEEP 24576:yvrHWdZcy2LvLWkX8QHzrVTMV87BbkjCMvGdLtOxIFIyGibdPgHB/eYvu5s2aC+:msSlsQT5Tb7mGVtOOI5Bh/e44s
- TLSH T1A375AD1277E58035F1B36731993A932499BABCB29839840E73DC662D1FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_927e29e23faa416713272a714726b617_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_927e29e23faa416713272a714726b617_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 3bfaf1522e8b3a16c6fd4978a6553ac4d73506a2f3102e5b62478606f77b32fe
- MD5 927e29e23faa416713272a714726b617
- SHA1 820d11783bf5341d8de6e72d80d5b91b6f8919e0
- SHA512 51b54cb1a7fe4b0336666a2e6854a6d4ccc71c37f5f9f021c35686be86788139a8508c6cd4cdc964d5779ed24b7785bcfc6baa85d9586fbc30ae4765f30ed8e0
- SSDEEP 24576:yvrHWdZcy2LvLWkX8QHzrVTMV87BbkjCMvGdLtOxIFIyGibdPgHB/eYvu5s2aC+:msSlsQT5Tb7mGVtOOI5Bh/e44s
- TLSH T1A375AD1277E58035F1B36731993A932499BABCB29839840E73DC662D1FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1