General
- Target 2026-08-08_82c5b7b9fe4353f7e5d35d6cf982a9ec_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260808-dsgc4assh1
- SHA256 c47295ffcc8574ecde1b1ec6e306ef92e2b97c26b85a5ab07bcee8b56cd6763b
- MD5 82c5b7b9fe4353f7e5d35d6cf982a9ec
- SHA1 b685f6058ea8d7f860aa2d352d90bb3835d5bca5
- SHA512 19491e7325371183687f479d61ef9f7c9d67dcbf71b0c5d588ff7e9f1a4ce97ad79d1a95cd97fd8cb8fcd921426c66eda19228486c228cbcfc5f245f4e0153ee
- SSDEEP 24576:ivrHWdZcy2NKcWXvHQHzJCTMV87BbkjCMvGdLt6nAJiodw/jhMOnUCqJB0BKVRe4:2sGqPQTATb7mGVtiGMHnUCqJSAVRj
- TLSH T10B75BE1237E99035F2B36731593A931499BABCB29839840E73DC662D5FB0691CE34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_82c5b7b9fe4353f7e5d35d6cf982a9ec_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_82c5b7b9fe4353f7e5d35d6cf982a9ec_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 c47295ffcc8574ecde1b1ec6e306ef92e2b97c26b85a5ab07bcee8b56cd6763b
- MD5 82c5b7b9fe4353f7e5d35d6cf982a9ec
- SHA1 b685f6058ea8d7f860aa2d352d90bb3835d5bca5
- SHA512 19491e7325371183687f479d61ef9f7c9d67dcbf71b0c5d588ff7e9f1a4ce97ad79d1a95cd97fd8cb8fcd921426c66eda19228486c228cbcfc5f245f4e0153ee
- SSDEEP 24576:ivrHWdZcy2NKcWXvHQHzJCTMV87BbkjCMvGdLt6nAJiodw/jhMOnUCqJB0BKVRe4:2sGqPQTATb7mGVtiGMHnUCqJSAVRj
- TLSH T10B75BE1237E99035F2B36731593A931499BABCB29839840E73DC662D5FB0691CE34B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1