General
- Target 2026-09-04_7a97c98447d872c98118f55315b404c9_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260905-gsd5hsvvbs
- SHA256 5a4741a451a64a7a1ddeb7b2e33caba343044c371610b96782467183dac68393
- MD5 7a97c98447d872c98118f55315b404c9
- SHA1 84336ffb9dd354ac367e504ef8f9339b111789d3
- SHA512 0e94832579d370251393e0101525bf32bec6c698f901067d24af050acf12abf711a70d37d56dd8301747339c20f6f0d07de061e39e6e052ec2639fc4021541cc
- SSDEEP 24576:ivrHWdZcy2ITjWRr4QHzrXTMV87BbkjCMvGdLtIUYwFSogf8ZK1+pWZlFmH:2s1AUQTTTb7mGVtIUEogkmDFm
- TLSH T19F75AD2277E58035F2B36731593A931499BAFCB29839840E73DC662D1F706A18E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_7a97c98447d872c98118f55315b404c9_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_7a97c98447d872c98118f55315b404c9_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 5a4741a451a64a7a1ddeb7b2e33caba343044c371610b96782467183dac68393
- MD5 7a97c98447d872c98118f55315b404c9
- SHA1 84336ffb9dd354ac367e504ef8f9339b111789d3
- SHA512 0e94832579d370251393e0101525bf32bec6c698f901067d24af050acf12abf711a70d37d56dd8301747339c20f6f0d07de061e39e6e052ec2639fc4021541cc
- SSDEEP 24576:ivrHWdZcy2ITjWRr4QHzrXTMV87BbkjCMvGdLtIUYwFSogf8ZK1+pWZlFmH:2s1AUQTTTb7mGVtIUEogkmDFm
- TLSH T19F75AD2277E58035F2B36731593A931499BAFCB29839840E73DC662D1F706A18E74B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1