General
- Target 2026-08-16_ff3021744a16a05e9df9d585b7611533_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260816-dvyedsck91
- SHA256 87b08280708a668d6d0773455cd9ab68634978334d3168e19310b87cd199731e
- MD5 ff3021744a16a05e9df9d585b7611533
- SHA1 ec527150fa2f7baffed74b63c7b87f8c37e64c5a
- SHA512 89ba63e1483caa4396cceffee7d37ed3f3be81b6d20ed2779953f792f4a79d82d1fd6fa0f33641eaa1d9a77a70fa1ce8ff6309c65bbb6529a924abddef9fd3d5
- SSDEEP 24576:yvrHWdZcy2dvqWU3IQHzEMTMV87BbkjCMvGdLt7VDB3Jw8QkVO+GftQuksrqLsN:msFx4QTZTb7mGVt7hBCD/fxkAqy
- TLSH T12975AE2277E58035F2B36731593A931459BABCB29839840E73DC662D2FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_ff3021744a16a05e9df9d585b7611533_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_ff3021744a16a05e9df9d585b7611533_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 87b08280708a668d6d0773455cd9ab68634978334d3168e19310b87cd199731e
- MD5 ff3021744a16a05e9df9d585b7611533
- SHA1 ec527150fa2f7baffed74b63c7b87f8c37e64c5a
- SHA512 89ba63e1483caa4396cceffee7d37ed3f3be81b6d20ed2779953f792f4a79d82d1fd6fa0f33641eaa1d9a77a70fa1ce8ff6309c65bbb6529a924abddef9fd3d5
- SSDEEP 24576:yvrHWdZcy2dvqWU3IQHzEMTMV87BbkjCMvGdLt7VDB3Jw8QkVO+GftQuksrqLsN:msFx4QTZTb7mGVt7hBCD/fxkAqy
- TLSH T12975AE2277E58035F2B36731593A931459BABCB29839840E73DC662D2FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1