General
- Target 2026-08-28_86a37bfb65d590a8ec69bd95faf45c8b_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260828-p44tbaxybt
- SHA256 4a89892a62e172d782b51e3c1f4ae339454b2e12ad6ae50a7d234d43172fcee1
- MD5 86a37bfb65d590a8ec69bd95faf45c8b
- SHA1 f4310e8334a069aed69fb43210182c1a1b343879
- SHA512 9e335b4603ea5fed42d9310c4473f3eb9e7220eb2d64a3e13d4e821f2f408c046bb042261cdf481ff3efce14645733487cbcefdff432733ffe9ad9cf82b138c0
- SSDEEP 24576:uhfDc6X3lQM5xr4cQFTj0OZeVJ5JdlXbKL8fHz0/LPRRPUoIyke9:tul15qcQFTIOZeJJz+gf4/LPRxBke
- TLSH T10A45E02EBEF1C032C1234135DD1ED368A2B4A47188250897BBDD675D2FB16D39B29B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-28_86a37bfb65d590a8ec69bd95faf45c8b_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-28_86a37bfb65d590a8ec69bd95faf45c8b_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 4a89892a62e172d782b51e3c1f4ae339454b2e12ad6ae50a7d234d43172fcee1
- MD5 86a37bfb65d590a8ec69bd95faf45c8b
- SHA1 f4310e8334a069aed69fb43210182c1a1b343879
- SHA512 9e335b4603ea5fed42d9310c4473f3eb9e7220eb2d64a3e13d4e821f2f408c046bb042261cdf481ff3efce14645733487cbcefdff432733ffe9ad9cf82b138c0
- SSDEEP 24576:uhfDc6X3lQM5xr4cQFTj0OZeVJ5JdlXbKL8fHz0/LPRRPUoIyke9:tul15qcQFTIOZeJJz+gf4/LPRxBke
- TLSH T10A45E02EBEF1C032C1234135DD1ED368A2B4A47188250897BBDD675D2FB16D39B29B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1