General
- Target 2026-09-03_bfa0557173ed1f77dfe6e75c4c6cfeb4_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260903-3xp88scc85
- SHA256 9ce477bc7a379d40850cfb8d22c9b9953f0f72f862d4c743c1bae4df358e9cac
- MD5 bfa0557173ed1f77dfe6e75c4c6cfeb4
- SHA1 d342021e79b09d013639111e5e20065b6cc5effd
- SHA512 ae2849ea6a1a468d049c095dfe641835a9ab1c4d66700085dc7b42c184004e11cfbebb821ea40bee469df95d30e8ae56a11f35fc7136ac6e3f6a1ac6f0425bd5
- SSDEEP 24576:yvrHWdZcy2Sv7WH/1QHzVYTMV87BbkjCMvGdLt8tkY5gIYBrHx5zM3FdyU1snhHK:msXedQTCTb7mGVt8KaorHx1YdyUGq
- TLSH T1A475AD1277E58035F1B36731993A931499BABCB29839840E73DC662D2FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_bfa0557173ed1f77dfe6e75c4c6cfeb4_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_bfa0557173ed1f77dfe6e75c4c6cfeb4_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 9ce477bc7a379d40850cfb8d22c9b9953f0f72f862d4c743c1bae4df358e9cac
- MD5 bfa0557173ed1f77dfe6e75c4c6cfeb4
- SHA1 d342021e79b09d013639111e5e20065b6cc5effd
- SHA512 ae2849ea6a1a468d049c095dfe641835a9ab1c4d66700085dc7b42c184004e11cfbebb821ea40bee469df95d30e8ae56a11f35fc7136ac6e3f6a1ac6f0425bd5
- SSDEEP 24576:yvrHWdZcy2Sv7WH/1QHzVYTMV87BbkjCMvGdLt8tkY5gIYBrHx5zM3FdyU1snhHK:msXedQTCTb7mGVt8KaorHx1YdyUGq
- TLSH T1A475AD1277E58035F1B36731993A931499BABCB29839840E73DC662D2FB0691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1