General
- Target 2026-08-10_d5ae70a8f605ef015301e5a9ed7f0bb1_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260811-a8zmtssdlb
- SHA256 f5a873c4790f69b6d62e198971aeb921f1a4b6e56ccdd966241381f60db6991a
- MD5 d5ae70a8f605ef015301e5a9ed7f0bb1
- SHA1 b9bfa91363bf51b2a89d2f698c02dcfcb1dc368c
- SHA512 20dd3ebf1d3bd31e7db6fcfd34da9b41c101ea6c80167572ba6eabde7c497b05a73dc78cb02958c7463c630e9a31e6bc2758de9c9fb8a23037e3e4313236a524
- SSDEEP 24576:8vrHWdZcy27hLWnrqQHzqYTMV87BbkjCMvGdLtyioQDHd9uJkrrwIesJ17VAKv1:EscG+QT7Tb7mGVtyiBB9uJkAQJ1+g1
- TLSH T13375AD1277E58035F1B36731993A83149ABABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_d5ae70a8f605ef015301e5a9ed7f0bb1_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_d5ae70a8f605ef015301e5a9ed7f0bb1_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 f5a873c4790f69b6d62e198971aeb921f1a4b6e56ccdd966241381f60db6991a
- MD5 d5ae70a8f605ef015301e5a9ed7f0bb1
- SHA1 b9bfa91363bf51b2a89d2f698c02dcfcb1dc368c
- SHA512 20dd3ebf1d3bd31e7db6fcfd34da9b41c101ea6c80167572ba6eabde7c497b05a73dc78cb02958c7463c630e9a31e6bc2758de9c9fb8a23037e3e4313236a524
- SSDEEP 24576:8vrHWdZcy27hLWnrqQHzqYTMV87BbkjCMvGdLtyioQDHd9uJkrrwIesJ17VAKv1:EscG+QT7Tb7mGVtyiBB9uJkAQJ1+g1
- TLSH T13375AD1277E58035F1B36731993A83149ABABCB29839840E73DC666D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1