General
- Target 2026-09-04_2111d6f95fcbbde30f092aacde2c5cca_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- Sample260905-t5kt2sycld
- SHA256 d78942cea2b567e13399b5e49ce7637af87b6f30885db1cc9f5bef392a2ac221
- MD5 2111d6f95fcbbde30f092aacde2c5cca
- SHA1 a0e20269a6b73a997a0ec7c9e6eec1a41443bb7d
- SHA512 c00dcdbfa577b53ed468e7199d013abbc352efd62debd36282b812e32bd69a76da659a321d1a8baeead40337946505044ee5953c6d8313a588ebe1c3cc84b2c9
- SSDEEP 24576:8vrHWdZcy2Sv7WW/1QHz4aTMV87BbkjCMvGdLtHILD8F8tEi5klhtKrLlzb6cd:EsXPdQTXTb7mGVtHIfHSa9fla2
- TLSH T11675AD1237E58035F1B36731593A93149ABABCB29839C40F73DC666D2F706A18E64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_2111d6f95fcbbde30f092aacde2c5cca_darkgate_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_2111d6f95fcbbde30f092aacde2c5cca_darkgate_elex_glassworm_mafia_remcos
- Size 1.5MB
- SHA256 d78942cea2b567e13399b5e49ce7637af87b6f30885db1cc9f5bef392a2ac221
- MD5 2111d6f95fcbbde30f092aacde2c5cca
- SHA1 a0e20269a6b73a997a0ec7c9e6eec1a41443bb7d
- SHA512 c00dcdbfa577b53ed468e7199d013abbc352efd62debd36282b812e32bd69a76da659a321d1a8baeead40337946505044ee5953c6d8313a588ebe1c3cc84b2c9
- SSDEEP 24576:8vrHWdZcy2Sv7WW/1QHz4aTMV87BbkjCMvGdLtHILD8F8tEi5klhtKrLlzb6cd:EsXPdQTXTb7mGVtHIfHSa9fla2
- TLSH T11675AD1237E58035F1B36731593A93149ABABCB29839C40F73DC666D2F706A18E64B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1