General
- Target 2026-08-08_70c460a2dfb76fa18b8fd73b438f81b0_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260808-dxnb7sygqa
- SHA256 81c14761feee28fc8cb60700fa1b0fbcd271e79b886f76f749116fcb65fceab1
- MD5 70c460a2dfb76fa18b8fd73b438f81b0
- SHA1 79537182084decbb273d594adddedf5eacdc4208
- SHA512 5f64c90628c1eb7790bd6ed829e452ddd4de4a3d9b93b485c7842cbe21d46b2eb8b7f9726a6f92b9d376eab5a1d4823af28f0cd76834831d81583ab99036a39d
- SSDEEP 24576:ivrHWdZcy2NKcW7vJQHzjUTMV87BbkjCMvGdLtwI5K4R1itChwEaGNpktQWge4uy:2sGGxQTgTb7mGVt35K4R1GCOE26W+2Eh
- TLSH T10375BD1277E58035F1B36731993A931499BABCB28839840E73DC666D2F70A91CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_70c460a2dfb76fa18b8fd73b438f81b0_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_70c460a2dfb76fa18b8fd73b438f81b0_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 81c14761feee28fc8cb60700fa1b0fbcd271e79b886f76f749116fcb65fceab1
- MD5 70c460a2dfb76fa18b8fd73b438f81b0
- SHA1 79537182084decbb273d594adddedf5eacdc4208
- SHA512 5f64c90628c1eb7790bd6ed829e452ddd4de4a3d9b93b485c7842cbe21d46b2eb8b7f9726a6f92b9d376eab5a1d4823af28f0cd76834831d81583ab99036a39d
- SSDEEP 24576:ivrHWdZcy2NKcW7vJQHzjUTMV87BbkjCMvGdLtwI5K4R1itChwEaGNpktQWge4uy:2sGGxQTgTb7mGVt35K4R1GCOE26W+2Eh
- TLSH T10375BD1277E58035F1B36731993A931499BABCB28839840E73DC666D2F70A91CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1