General
- Target 2026-08-08_12b5694ee4457ead14cb483c639f05a4_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260808-epfg3ahm4v
- SHA256 80207145a85a237862c98b9252fabea09257f079243dce7c0526c132cbd38074
- MD5 12b5694ee4457ead14cb483c639f05a4
- SHA1 928ecb1fb5e9e0023f9d5ca72dbb639ce67793d4
- SHA512 d4f2fb9496166076cd2ec0765b0bb339f17295fbbd73e86dff366ef2408ff081e176c8eb12925dc7aa00d140609d15441c9478be7a34cc2cf54e3eb7da7958c7
- SSDEEP 24576:uhfDc6X3lQM5xr4cQFTj0OZeVJ0tuphSVDcQo0jJXyyF4DC6Rbz:tul15qcQFTIOZevph2ho0jJtUC6t
- TLSH T12545E01EBEF1D032C02352318D6AD35862B8A4B288364497BBDD672D2F715D39735BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_12b5694ee4457ead14cb483c639f05a4_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_12b5694ee4457ead14cb483c639f05a4_elex_glassworm_mafia_remcos.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_12b5694ee4457ead14cb483c639f05a4_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 80207145a85a237862c98b9252fabea09257f079243dce7c0526c132cbd38074
- MD5 12b5694ee4457ead14cb483c639f05a4
- SHA1 928ecb1fb5e9e0023f9d5ca72dbb639ce67793d4
- SHA512 d4f2fb9496166076cd2ec0765b0bb339f17295fbbd73e86dff366ef2408ff081e176c8eb12925dc7aa00d140609d15441c9478be7a34cc2cf54e3eb7da7958c7
- SSDEEP 24576:uhfDc6X3lQM5xr4cQFTj0OZeVJ0tuphSVDcQo0jJXyyF4DC6Rbz:tul15qcQFTIOZevph2ho0jJtUC6t
- TLSH T12545E01EBEF1D032C02352318D6AD35862B8A4B288364497BBDD672D2F715D39735BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1