General
- Target 2026-08-16_5bdfdf5bfc6d99a18d8b0c2190170c9e_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260816-e46mssdj4v
- SHA256 a14b2d192c82a3315c02693f27769acda5adcaf8852a4029e5d042009cdde144
- MD5 5bdfdf5bfc6d99a18d8b0c2190170c9e
- SHA1 a6857bbe5fa213799490af7dd4ca0b555988b4d0
- SHA512 c71c30125c009db325d094a138b14feb97192148cfa3fe6c7acc77da56539569c60460751056c7c29d35d4b6b9d6c5edcb0d113acfde853110648b7ab618cc48
- SSDEEP 24576:YhfDc6X3lQMnxr4cQFTj0OZeVJQVDB3Jw8QkVO+GftQuksrqLsN:Tul1nqcQFTIOZeAhBCD/fxkAqy
- TLSH T10945E02EBEF1C032C12352319D6AD35862B5F47148264893BBDDA71D2FB05D29B39B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_5bdfdf5bfc6d99a18d8b0c2190170c9e_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_5bdfdf5bfc6d99a18d8b0c2190170c9e_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 a14b2d192c82a3315c02693f27769acda5adcaf8852a4029e5d042009cdde144
- MD5 5bdfdf5bfc6d99a18d8b0c2190170c9e
- SHA1 a6857bbe5fa213799490af7dd4ca0b555988b4d0
- SHA512 c71c30125c009db325d094a138b14feb97192148cfa3fe6c7acc77da56539569c60460751056c7c29d35d4b6b9d6c5edcb0d113acfde853110648b7ab618cc48
- SSDEEP 24576:YhfDc6X3lQMnxr4cQFTj0OZeVJQVDB3Jw8QkVO+GftQuksrqLsN:Tul1nqcQFTIOZeAhBCD/fxkAqy
- TLSH T10945E02EBEF1C032C12352319D6AD35862B5F47148264893BBDDA71D2FB05D29B39B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1