General
- Target 2026-08-27_fa1f53c098b34219ff4327dcd4cd9736_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260827-f2jwpaxyat
- SHA256 eca4787d6798e1f18c7927876f2c02ef8ee2c4928bd49b5e228bf50b90513315
- MD5 fa1f53c098b34219ff4327dcd4cd9736
- SHA1 881290f9b88104dedd23dba49211a0741bc4aa30
- SHA512 56e23a4bd8eb349a74eacbf6cb903ad100f1f69d99161da51d77a0120d3897fee138be4a2fe3cd250db0b0b9c657c7bbb6317e50172bd59576ba546edbea6ed7
- SSDEEP 24576:yvrHWdZcy2/ybWw03QHz+XTMV87BbkjCMvGdLtm2+Z3zkk2OR4/ZQpib:msvJqQT0Tb7mGVtmLZwGR4BQg
- TLSH T1E875AC2277E98035F2B36731993A931459BABCB29839C40E73DC662D1F70691CE64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_fa1f53c098b34219ff4327dcd4cd9736_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_fa1f53c098b34219ff4327dcd4cd9736_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 eca4787d6798e1f18c7927876f2c02ef8ee2c4928bd49b5e228bf50b90513315
- MD5 fa1f53c098b34219ff4327dcd4cd9736
- SHA1 881290f9b88104dedd23dba49211a0741bc4aa30
- SHA512 56e23a4bd8eb349a74eacbf6cb903ad100f1f69d99161da51d77a0120d3897fee138be4a2fe3cd250db0b0b9c657c7bbb6317e50172bd59576ba546edbea6ed7
- SSDEEP 24576:yvrHWdZcy2/ybWw03QHz+XTMV87BbkjCMvGdLtm2+Z3zkk2OR4/ZQpib:msvJqQT0Tb7mGVtmLZwGR4BQg
- TLSH T1E875AC2277E98035F2B36731993A931459BABCB29839C40E73DC662D1F70691CE64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1