General
- Target 2026-09-03_c97e5e3b2d23c9942c846558359229fa_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260903-2pzx2axdpd
- SHA256 2704f67de3a8233d226cee3f87d54e94e95b3f048d5829aa566372c1fcfe6250
- MD5 c97e5e3b2d23c9942c846558359229fa
- SHA1 3b16f882a65e6c42a4e1733582b6f927a77d856a
- SHA512 500313388b33701b215d9c81e07d82174e8eea8120321cef29e83ab35e5ea0222e38892e8105c4c6cf362e05b881a938062e4b13f4ab4351fb7bd5772a5e85ca
- SSDEEP 24576:8vrHWdZcy2Sv7WW/1QHz4aTMV87BbkjCMvGdLtyPCUjDwnXOGYPymJsWa:EsXPdQT7Tb7mGVtQdHwno6/
- TLSH T1B775AD1277E58035F1B36731993A931499BABCB29839840E73DC662D6FB0691CE74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_c97e5e3b2d23c9942c846558359229fa_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_c97e5e3b2d23c9942c846558359229fa_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 2704f67de3a8233d226cee3f87d54e94e95b3f048d5829aa566372c1fcfe6250
- MD5 c97e5e3b2d23c9942c846558359229fa
- SHA1 3b16f882a65e6c42a4e1733582b6f927a77d856a
- SHA512 500313388b33701b215d9c81e07d82174e8eea8120321cef29e83ab35e5ea0222e38892e8105c4c6cf362e05b881a938062e4b13f4ab4351fb7bd5772a5e85ca
- SSDEEP 24576:8vrHWdZcy2Sv7WW/1QHz4aTMV87BbkjCMvGdLtyPCUjDwnXOGYPymJsWa:EsXPdQT7Tb7mGVtQdHwno6/
- TLSH T1B775AD1277E58035F1B36731993A931499BABCB29839840E73DC662D6FB0691CE74B33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1