General
- Target 2026-09-03_e2c54bb983d86038442f61742196b3bf_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260903-y8dmcsvgrd
- SHA256 9e63eae312e0f6ae2bd0f72c8d3022f90f38a26db0b0ebe674e08009b3109856
- MD5 e2c54bb983d86038442f61742196b3bf
- SHA1 fe0d2e9fc3c738e4fe24574541339cc38b6fb8dd
- SHA512 b4f09afd82f6c7085106f303db2319acdcd7221e50f9a905193d0f2a176bb3b31c77d9a0ff74c9453bc47515352b9641707818405717d04e10d419b6a573da91
- SSDEEP 24576:8vrHWdZcy2Sv7WW/1QHzVKTMV87BbkjCMvGdLt4OFGYabRGtrj44Zz+Mu5DVMyRV:EsXPdQTgTb7mGVtQYBtrs4B+Mu1VnRV
- TLSH T1A075AD1277E58035F1B36731993A931899BABCB29839840E73DC662D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-03_e2c54bb983d86038442f61742196b3bf_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-03_e2c54bb983d86038442f61742196b3bf_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 9e63eae312e0f6ae2bd0f72c8d3022f90f38a26db0b0ebe674e08009b3109856
- MD5 e2c54bb983d86038442f61742196b3bf
- SHA1 fe0d2e9fc3c738e4fe24574541339cc38b6fb8dd
- SHA512 b4f09afd82f6c7085106f303db2319acdcd7221e50f9a905193d0f2a176bb3b31c77d9a0ff74c9453bc47515352b9641707818405717d04e10d419b6a573da91
- SSDEEP 24576:8vrHWdZcy2Sv7WW/1QHzVKTMV87BbkjCMvGdLt4OFGYabRGtrj44Zz+Mu5DVMyRV:EsXPdQTgTb7mGVtQYBtrs4B+Mu1VnRV
- TLSH T1A075AD1277E58035F1B36731993A931899BABCB29839840E73DC662D2F70691CE74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1