General
- Target 2026-08-16_f039cd32bc2eab866336a6c027873fac_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260816-dzsppsydrd
- SHA256 7e2d8dd046921f0033147ad6add27c3a3e488102fd89063f63855e3ed0c9dc71
- MD5 f039cd32bc2eab866336a6c027873fac
- SHA1 af5550ad8ac625640a0dcf14f2d68bb6f25ae201
- SHA512 ff1a6615e9ecbc715d39a89483d394f78b6ce2970069d768441211213d5234b1a2fe2733fde66375ad8b338117a59561d3d60b83c5ba50bf2fa2baf2b9af8f30
- SSDEEP 24576:yvrHWdZcy2dvqWQ39QHzhPTMV87BbkjCMvGdLtI2uw1XPqs++IBY981aJHA11:msFFtQTJTb7mGVtIJ2yRdBcEwg
- TLSH T16475AD1277E59035F1B36731993A931499BABCB29839C40E73DC662D2FB06918E70B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_f039cd32bc2eab866336a6c027873fac_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_f039cd32bc2eab866336a6c027873fac_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 7e2d8dd046921f0033147ad6add27c3a3e488102fd89063f63855e3ed0c9dc71
- MD5 f039cd32bc2eab866336a6c027873fac
- SHA1 af5550ad8ac625640a0dcf14f2d68bb6f25ae201
- SHA512 ff1a6615e9ecbc715d39a89483d394f78b6ce2970069d768441211213d5234b1a2fe2733fde66375ad8b338117a59561d3d60b83c5ba50bf2fa2baf2b9af8f30
- SSDEEP 24576:yvrHWdZcy2dvqWQ39QHzhPTMV87BbkjCMvGdLtI2uw1XPqs++IBY981aJHA11:msFFtQTJTb7mGVtIJ2yRdBcEwg
- TLSH T16475AD1277E59035F1B36731993A931499BABCB29839C40E73DC662D2FB06918E70B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1