General
- Target 2026-09-04_3ddb356e2c694bd4baf1d7130891a907_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260905-qqd66swajb
- SHA256 ad127ddb3d202a6ed8797156ae31f46f4ed3eebf7e84884b9b1577e8ce835877
- MD5 3ddb356e2c694bd4baf1d7130891a907
- SHA1 2b27eddc540ced191f799828bf62fb2b10d6ed98
- SHA512 1382697d490c3de6289e5731151dd951b08578d69a9e4a2f5491b86da0b2b4464459219aa9cdbb4574394f87b3c588a980d43f5c7abb0a4b06644653dac4c75c
- SSDEEP 24576:4hfDc6X3lQM3xr4cQFTj0OZeVJl0bDDhNY4o63q83WcRQ+nz17e8f:zul13qcQFTIOZeebhN3aohnzk8f
- TLSH T12F45E01EBEF0C032C12312318D6AD358A1B5E4B248264487BBED675D6FB15D39B35BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_3ddb356e2c694bd4baf1d7130891a907_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_3ddb356e2c694bd4baf1d7130891a907_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 ad127ddb3d202a6ed8797156ae31f46f4ed3eebf7e84884b9b1577e8ce835877
- MD5 3ddb356e2c694bd4baf1d7130891a907
- SHA1 2b27eddc540ced191f799828bf62fb2b10d6ed98
- SHA512 1382697d490c3de6289e5731151dd951b08578d69a9e4a2f5491b86da0b2b4464459219aa9cdbb4574394f87b3c588a980d43f5c7abb0a4b06644653dac4c75c
- SSDEEP 24576:4hfDc6X3lQM3xr4cQFTj0OZeVJl0bDDhNY4o63q83WcRQ+nz17e8f:zul13qcQFTIOZeebhN3aohnzk8f
- TLSH T12F45E01EBEF0C032C12312318D6AD358A1B5E4B248264487BBED675D6FB15D39B35BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1