General
- Target 2026-08-30_033db96fd10f525041e673671f7fac67_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260830-2dgmbattdx
- SHA256 e068b341b16bd4b30eea58c33aa4a29f0ae5c5bb94de06bcfe270d3920bd8704
- MD5 033db96fd10f525041e673671f7fac67
- SHA1 133da49e1969789237becf7f01eeed3a7f70b69c
- SHA512 38c05801131dea3867658240020a20cc72dd36094aa0c4dbd6ce7b63e5da0362f45e4dcad9fab3a5d87f303572b649e311060688f58418e77d3c968303fce1f3
- SSDEEP 24576:YhfDc6X3lQMnxr4cQFTj0OZeVJ2zZOfPg/DewiBO3Mh4UhCJxtv4oO:Tul1nqcQFTIOZecOHg6POXxVo
- TLSH T1DB45E02EBAF1C032C12351319D6AE358A1B5F47188260487BBDD671D2FB15D39B39BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_033db96fd10f525041e673671f7fac67_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_033db96fd10f525041e673671f7fac67_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 e068b341b16bd4b30eea58c33aa4a29f0ae5c5bb94de06bcfe270d3920bd8704
- MD5 033db96fd10f525041e673671f7fac67
- SHA1 133da49e1969789237becf7f01eeed3a7f70b69c
- SHA512 38c05801131dea3867658240020a20cc72dd36094aa0c4dbd6ce7b63e5da0362f45e4dcad9fab3a5d87f303572b649e311060688f58418e77d3c968303fce1f3
- SSDEEP 24576:YhfDc6X3lQMnxr4cQFTj0OZeVJ2zZOfPg/DewiBO3Mh4UhCJxtv4oO:Tul1nqcQFTIOZecOHg6POXxVo
- TLSH T1DB45E02EBAF1C032C12351319D6AE358A1B5F47188260487BBDD671D2FB15D39B39BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1