General
- Target 2026-08-16_e663645c6e643d36f940cce6f622d59b_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260816-d2c22ay1ft
- SHA256 af0038bc4603fa0cc7fb4e59a3a6a595ebf6d3b5f8dc0cd751d707399f923084
- MD5 e663645c6e643d36f940cce6f622d59b
- SHA1 03b851b248519267f305c64a917c5060cdff6acb
- SHA512 51ad04eb7e3d84b2c1e8964f8ab56fbd45a3a5569fe436129a39909372a1a22358e01138b716ede8db323aa29fd7bd3b3ef09dc853e7190b33a1f46b6737a323
- SSDEEP 24576:YhfDc6X3lQMnxr4cQFTj0OZeVJDxIFIyGibdPgHB/eYvu5s2aC+:Tul1nqcQFTIOZezOI5Bh/e44s
- TLSH T1AA45E01EBAF1C032C12311309D6AD358A1F5E4B148264887BBDD672D2FB15D39B39BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_e663645c6e643d36f940cce6f622d59b_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_e663645c6e643d36f940cce6f622d59b_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 af0038bc4603fa0cc7fb4e59a3a6a595ebf6d3b5f8dc0cd751d707399f923084
- MD5 e663645c6e643d36f940cce6f622d59b
- SHA1 03b851b248519267f305c64a917c5060cdff6acb
- SHA512 51ad04eb7e3d84b2c1e8964f8ab56fbd45a3a5569fe436129a39909372a1a22358e01138b716ede8db323aa29fd7bd3b3ef09dc853e7190b33a1f46b6737a323
- SSDEEP 24576:YhfDc6X3lQMnxr4cQFTj0OZeVJDxIFIyGibdPgHB/eYvu5s2aC+:Tul1nqcQFTIOZezOI5Bh/e44s
- TLSH T1AA45E01EBAF1C032C12311309D6AD358A1F5E4B148264887BBDD672D2FB15D39B39BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1