General
- Target 2026-09-04_29b8b64a5c008bd23ae2274d0f19741d_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260905-s847esef85
- SHA256 60c035a469f29d3bf2de2d83f78e724c2dd580a138458ca996821be4e6388616
- MD5 29b8b64a5c008bd23ae2274d0f19741d
- SHA1 91f5b0ea73b4e870cb1f3eec7ad3a09e7b66d242
- SHA512 c431b0a9e5e96b78a06ea8f15214e4a1df01f6b59a2a4d3ff64d91e3792289e5a3ad8c7d6c3927e78d05783a469e81401c223c3991abe52082917018b0cb1a66
- SSDEEP 24576:4hfDc6X3lQM3xr4cQFTj0OZeVJpc67rDYRcPeHbZ5LK2b7kU:zul13qcQFTIOZe37nycWHV5LNvB
- TLSH T12645E01E7AF1C032C03352309E6AD358A2B5E47248260447BBED675D2FB15D2DB39BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_29b8b64a5c008bd23ae2274d0f19741d_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_29b8b64a5c008bd23ae2274d0f19741d_elex_glassworm_mafia_remcos.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_29b8b64a5c008bd23ae2274d0f19741d_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 60c035a469f29d3bf2de2d83f78e724c2dd580a138458ca996821be4e6388616
- MD5 29b8b64a5c008bd23ae2274d0f19741d
- SHA1 91f5b0ea73b4e870cb1f3eec7ad3a09e7b66d242
- SHA512 c431b0a9e5e96b78a06ea8f15214e4a1df01f6b59a2a4d3ff64d91e3792289e5a3ad8c7d6c3927e78d05783a469e81401c223c3991abe52082917018b0cb1a66
- SSDEEP 24576:4hfDc6X3lQM3xr4cQFTj0OZeVJpc67rDYRcPeHbZ5LK2b7kU:zul13qcQFTIOZe37nycWHV5LNvB
- TLSH T12645E01E7AF1C032C03352309E6AD358A2B5E47248260447BBED675D2FB15D2DB39BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1