General
- Target 2026-08-27_8f5fe953d6d45e30f974f29b4870e0f9_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260827-p46b5stwfx
- SHA256 41855c807f7bde959b3643d9bc4ae53aa00a1de31587fe127543f5a5c307245b
- MD5 8f5fe953d6d45e30f974f29b4870e0f9
- SHA1 4460eb4f2c10abb812170eb0fd33a8ac34175513
- SHA512 6abef9ef28fba96935dbf5ace54a3dd6cf02effd45e2cbbff2e4bba1b3389448208017a21a23c1ff62873ae1ad65962fdd566b8b7e9d7dc6052f3152c89c0ffb
- SSDEEP 24576:uhfDc6X3lQM5xr4cQFTj0OZeVJIILD8F8tEi5klhtKrLlzb6c:tul15qcQFTIOZe4IfHSa9fla
- TLSH T19845E02A7EF1C032C12311308D6EE358A2B5E4B14C264857BBEDA75D2F751D38729BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_8f5fe953d6d45e30f974f29b4870e0f9_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_8f5fe953d6d45e30f974f29b4870e0f9_elex_glassworm_mafia_remcos.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_8f5fe953d6d45e30f974f29b4870e0f9_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 41855c807f7bde959b3643d9bc4ae53aa00a1de31587fe127543f5a5c307245b
- MD5 8f5fe953d6d45e30f974f29b4870e0f9
- SHA1 4460eb4f2c10abb812170eb0fd33a8ac34175513
- SHA512 6abef9ef28fba96935dbf5ace54a3dd6cf02effd45e2cbbff2e4bba1b3389448208017a21a23c1ff62873ae1ad65962fdd566b8b7e9d7dc6052f3152c89c0ffb
- SSDEEP 24576:uhfDc6X3lQM5xr4cQFTj0OZeVJIILD8F8tEi5klhtKrLlzb6c:tul15qcQFTIOZe4IfHSa9fla
- TLSH T19845E02A7EF1C032C12311308D6EE358A2B5E4B14C264857BBEDA75D2F751D38729BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1