General
- Target 2026-08-28_ea033b97ae86e511eca824deff299f7c_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260828-hhsetsfl8x
- SHA256 3dd5188c90f919f8b3dd6e9b74f9c05dbffa17cbaf3aa9b3b4a0ba8c44a6bd6d
- MD5 ea033b97ae86e511eca824deff299f7c
- SHA1 e56b3b2926ef8f7b14920a06cbc38dac3628ef1e
- SHA512 63230bedf3f7542cc1dbf1cf9acf432f37642f3c50e43af7614a941b192f5aeda859e28b56ed20dfa85bb6e8e91323f4e4d3b00338e53e1b4c4318d30462c7fa
- SSDEEP 24576:8vrHWdZcy2zyTWQcuQHzKrTMV87BbkjCMvGdLtdSzEfscJ4t7Oy5bYXUT3fPQn1:EsThPQTsTb7mGVtdSzE0cJ4pvbYGfe
- TLSH T18A75AD1277E58035F1B36731A93A832499BABCB29839840E73DC662D5F706D18E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_ea033b97ae86e511eca824deff299f7c_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_ea033b97ae86e511eca824deff299f7c_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 3dd5188c90f919f8b3dd6e9b74f9c05dbffa17cbaf3aa9b3b4a0ba8c44a6bd6d
- MD5 ea033b97ae86e511eca824deff299f7c
- SHA1 e56b3b2926ef8f7b14920a06cbc38dac3628ef1e
- SHA512 63230bedf3f7542cc1dbf1cf9acf432f37642f3c50e43af7614a941b192f5aeda859e28b56ed20dfa85bb6e8e91323f4e4d3b00338e53e1b4c4318d30462c7fa
- SSDEEP 24576:8vrHWdZcy2zyTWQcuQHzKrTMV87BbkjCMvGdLtdSzEfscJ4t7Oy5bYXUT3fPQn1:EsThPQTsTb7mGVtdSzE0cJ4pvbYGfe
- TLSH T18A75AD1277E58035F1B36731A93A832499BABCB29839840E73DC662D5F706D18E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1