General
- Target 2026-08-16_84868f7bc9e2e18f6031d07ac495fa92_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260816-esrphabb57
- SHA256 6c8ffc7b3e151e9cd126d2992daee06eba4f018dfe46995e9a51361a57e3053c
- MD5 84868f7bc9e2e18f6031d07ac495fa92
- SHA1 e81df2acc44de39e38e2a26301aa5ad60c9e50f4
- SHA512 519d7c271b59b9c91928a04f6578d9857839ae058ecb1068c0b148421aa2f496fdbc6ff3efd7f6536d873c11a023aa261060893443a2491451c487d56843b953
- SSDEEP 24576:8vrHWdZcy2dvqWe36QHzHJTMV87BbkjCMvGdLtGC7bNX+qIYU/vGm5F:EsF7KQTpTb7mGVtGCV+B33pF
- TLSH T1B275BD1237E58035F6B36731597A931899BABCB29839C40E73DC662D2F70691CE60B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_84868f7bc9e2e18f6031d07ac495fa92_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_84868f7bc9e2e18f6031d07ac495fa92_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 6c8ffc7b3e151e9cd126d2992daee06eba4f018dfe46995e9a51361a57e3053c
- MD5 84868f7bc9e2e18f6031d07ac495fa92
- SHA1 e81df2acc44de39e38e2a26301aa5ad60c9e50f4
- SHA512 519d7c271b59b9c91928a04f6578d9857839ae058ecb1068c0b148421aa2f496fdbc6ff3efd7f6536d873c11a023aa261060893443a2491451c487d56843b953
- SSDEEP 24576:8vrHWdZcy2dvqWe36QHzHJTMV87BbkjCMvGdLtGC7bNX+qIYU/vGm5F:EsF7KQTpTb7mGVtGCV+B33pF
- TLSH T1B275BD1237E58035F6B36731597A931899BABCB29839C40E73DC662D2F70691CE60B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1