General
- Target 2026-08-08_2cbd223e4824d0d2b853a05bfe6f18d5_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260808-efvwdssycv
- SHA256 10c0d3c0e3d92cd568ee3d98be852e42af1de9b105fb2ce6e7f6529c8e6580b7
- MD5 2cbd223e4824d0d2b853a05bfe6f18d5
- SHA1 a4f73c03036d050b47699e756c60c1816547e019
- SHA512 a8188da6c32b11a94bdb868c5865b2d6e52f8b09639032411e7d985ff21097350d13076950f2170607bf068ca2f2a796a901923bc8523a84bec94e02fcec9ae6
- SSDEEP 24576:8vrHWdZcy2LvLW2X2QHzXjTMV87BbkjCMvGdLtFtuphSVDcQo0jJXyyF4DC6Rbzf:EsSTGQTzTb7mGVteph2ho0jJtUC6tz
- TLSH T1E775BD223BE59035F1B36731593A932459BABCB29839C40E73DC662D2F706918E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_2cbd223e4824d0d2b853a05bfe6f18d5_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_2cbd223e4824d0d2b853a05bfe6f18d5_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 10c0d3c0e3d92cd568ee3d98be852e42af1de9b105fb2ce6e7f6529c8e6580b7
- MD5 2cbd223e4824d0d2b853a05bfe6f18d5
- SHA1 a4f73c03036d050b47699e756c60c1816547e019
- SHA512 a8188da6c32b11a94bdb868c5865b2d6e52f8b09639032411e7d985ff21097350d13076950f2170607bf068ca2f2a796a901923bc8523a84bec94e02fcec9ae6
- SSDEEP 24576:8vrHWdZcy2LvLW2X2QHzXjTMV87BbkjCMvGdLtFtuphSVDcQo0jJXyyF4DC6Rbzf:EsSTGQTzTb7mGVteph2ho0jJtUC6tz
- TLSH T1E775BD223BE59035F1B36731593A932459BABCB29839C40E73DC662D2F706918E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1