General
- Target 2026-08-21_14449a51a4ccfa98b7660cf809056703_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260822-xej2lsbl51
- SHA256 1cba74d8ff5ec8af69ff35a6439e298c31a5b06fd187ba6a6b8e9d0a902dc5c0
- MD5 14449a51a4ccfa98b7660cf809056703
- SHA1 cbede30bb959f870ed7d7ca147442f3ea47121a7
- SHA512 58addcda446bbd719c153377382c95c6175570d0467410ceac0d3f8a655df8177e68fe0f7bc9b5cc3b9c028288487d0475f09875790c6179bd637f7b10f942d9
- SSDEEP 24576:4hfDc6X3lQM3xr4cQFTj0OZeVJ/ATqGTTL6Zu0d/uFa6BIj:zul13qcQFTIOZe4+GTv6Q/a6Be
- TLSH T1D345E02A7AF0C032C13352358D6ED348A2B5A47258264497FBED671D2FB01D39B35BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_14449a51a4ccfa98b7660cf809056703_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_14449a51a4ccfa98b7660cf809056703_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 1cba74d8ff5ec8af69ff35a6439e298c31a5b06fd187ba6a6b8e9d0a902dc5c0
- MD5 14449a51a4ccfa98b7660cf809056703
- SHA1 cbede30bb959f870ed7d7ca147442f3ea47121a7
- SHA512 58addcda446bbd719c153377382c95c6175570d0467410ceac0d3f8a655df8177e68fe0f7bc9b5cc3b9c028288487d0475f09875790c6179bd637f7b10f942d9
- SSDEEP 24576:4hfDc6X3lQM3xr4cQFTj0OZeVJ/ATqGTTL6Zu0d/uFa6BIj:zul13qcQFTIOZe4+GTv6Q/a6Be
- TLSH T1D345E02A7AF0C032C13352358D6ED348A2B5A47258264497FBED671D2FB01D39B35BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1