General
- Target 2026-08-08_8c1aa6d93e8b128cf9958c43c90b919b_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260808-dpzehasscv
- SHA256 7ae23984bebf83729fcff4a2421afa40b294a2700b98f1015e0287b3c7439b09
- MD5 8c1aa6d93e8b128cf9958c43c90b919b
- SHA1 d6de2722709a36dc9e7761cc980d98972550c4da
- SHA512 d4bdd879c9117a180c0277830b00326e71cdc536157e4c77dcce4da55aced7783859a1c9b5af181b96e00e2f61052a37970095ad583bbb483dedb90c1fe0f2f3
- SSDEEP 24576:ivrHWdZcy2NKcWzvJQHz4UTMV87BbkjCMvGdLtmT7Jckdwi6i9bNrqq4E41WFpWc:2sGuxQThTb7mGVt87Jckdwi3N7+WTW3
- TLSH T11575BD1277E58035F2B36731993A931499BABCB29839840E73DC666C2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_8c1aa6d93e8b128cf9958c43c90b919b_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_8c1aa6d93e8b128cf9958c43c90b919b_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 7ae23984bebf83729fcff4a2421afa40b294a2700b98f1015e0287b3c7439b09
- MD5 8c1aa6d93e8b128cf9958c43c90b919b
- SHA1 d6de2722709a36dc9e7761cc980d98972550c4da
- SHA512 d4bdd879c9117a180c0277830b00326e71cdc536157e4c77dcce4da55aced7783859a1c9b5af181b96e00e2f61052a37970095ad583bbb483dedb90c1fe0f2f3
- SSDEEP 24576:ivrHWdZcy2NKcWzvJQHz4UTMV87BbkjCMvGdLtmT7Jckdwi6i9bNrqq4E41WFpWc:2sGuxQThTb7mGVt87Jckdwi3N7+WTW3
- TLSH T11575BD1277E58035F2B36731993A931499BABCB29839840E73DC666C2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1