General
- Target 2026-08-30_24d54be96a680bea1a51651f210277d1_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260830-y9gemshj3z
- SHA256 66d09439c9880405f09a0bc295309bb4aa884b540cb828ced77e5a19160077b4
- MD5 24d54be96a680bea1a51651f210277d1
- SHA1 82e3525fcbbff1e935e6b820df795fb9bbaa4327
- SHA512 e0c134dfacf887f76e45a60c31867b53134d1c9642e7458819b206f9f6f60c17cbbab25e82c8e0500212604db955a5407de9041c1d62131a56ccfc08dc83de09
- SSDEEP 24576:YhfDc6X3lQMnxr4cQFTj0OZeVJKXF0eP//AJO3PxRvrkUI0Vamrh162:Tul1nqcQFTIOZeS0ePAAn4UVVXz7
- TLSH T11045E01EBEF1C032C1231234CE6ED35862B5A47188264847BBDD675D2FB05D39A39BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_24d54be96a680bea1a51651f210277d1_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_24d54be96a680bea1a51651f210277d1_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 66d09439c9880405f09a0bc295309bb4aa884b540cb828ced77e5a19160077b4
- MD5 24d54be96a680bea1a51651f210277d1
- SHA1 82e3525fcbbff1e935e6b820df795fb9bbaa4327
- SHA512 e0c134dfacf887f76e45a60c31867b53134d1c9642e7458819b206f9f6f60c17cbbab25e82c8e0500212604db955a5407de9041c1d62131a56ccfc08dc83de09
- SSDEEP 24576:YhfDc6X3lQMnxr4cQFTj0OZeVJKXF0eP//AJO3PxRvrkUI0Vamrh162:Tul1nqcQFTIOZeS0ePAAn4UVVXz7
- TLSH T11045E01EBEF1C032C1231234CE6ED35862B5A47188264847BBDD675D2FB05D39A39BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1