General
- Target 2026-08-10_3e54de2cfe3af8dee83d5ef112e77efc_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260811-bs8q8syshv
- SHA256 fe94707feb71966f78faa61770aa6bdfb127e8a692025ec5b611160ee8233428
- MD5 3e54de2cfe3af8dee83d5ef112e77efc
- SHA1 710d32e16d587f0d841829d14df6f4924e02c795
- SHA512 5e6927ff3efeafc7364b7b39aa9161f7e3c5d3e6a439882e39eafc1066f8f92f95d4eb85d564ee57edd57fbf8cf5d8ef953127f5bbe110600042fbf8c7b4dcf8
- SSDEEP 24576:8vrHWdZcy27hLWnrqQHzqoTMV87BbkjCMvGdLt+B63zWe+8yldnog6UY8ftdOTHw:EscG+QTjTb7mGVt+Bgz7EjPY4ObK+s
- TLSH T1B675AD1237E98035F2B36631993A93149ABABCB25839840E73DC676D1F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_3e54de2cfe3af8dee83d5ef112e77efc_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_3e54de2cfe3af8dee83d5ef112e77efc_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 fe94707feb71966f78faa61770aa6bdfb127e8a692025ec5b611160ee8233428
- MD5 3e54de2cfe3af8dee83d5ef112e77efc
- SHA1 710d32e16d587f0d841829d14df6f4924e02c795
- SHA512 5e6927ff3efeafc7364b7b39aa9161f7e3c5d3e6a439882e39eafc1066f8f92f95d4eb85d564ee57edd57fbf8cf5d8ef953127f5bbe110600042fbf8c7b4dcf8
- SSDEEP 24576:8vrHWdZcy27hLWnrqQHzqoTMV87BbkjCMvGdLt+B63zWe+8yldnog6UY8ftdOTHw:EscG+QTjTb7mGVt+Bgz7EjPY4ObK+s
- TLSH T1B675AD1237E98035F2B36631993A93149ABABCB25839840E73DC676D1F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1