General
- Target 2026-09-05_517790a5fa5c6360f5c20582f5d1eb17_elex_glassworm_mafia_remcos
- Size 1.2MB
- Sample260907-2vn3qavyft
- SHA256 aefcc95fa3c9e85a352a491459c2b7862ace0f97477244034bfee0c40a6452b3
- MD5 517790a5fa5c6360f5c20582f5d1eb17
- SHA1 4d2e7712f74c9fc217e81b2c6da7a2037d6cd7f6
- SHA512 5e8e193d527b1ef566484812239f78fb9911f0170e96e8782da1cc7d545ef801a716e87fdbbe1ef47e8cf0d91fb4ba084dfd06271c82d1c3e7158eee76583ecf
- SSDEEP 24576:4hfDc6X3lQM3xr4cQFTj0OZeVJkhGNntHl550U0rvtZpBZmV+J:zul13qcQFTIOZe0ANn9lP0JDdb
- TLSH T1FE45E01AFAF0C032C02352B19D2AE358A2B5F47148264857BBDDA71D2FB41D39735BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_517790a5fa5c6360f5c20582f5d1eb17_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_517790a5fa5c6360f5c20582f5d1eb17_elex_glassworm_mafia_remcos
- Size 1.2MB
- SHA256 aefcc95fa3c9e85a352a491459c2b7862ace0f97477244034bfee0c40a6452b3
- MD5 517790a5fa5c6360f5c20582f5d1eb17
- SHA1 4d2e7712f74c9fc217e81b2c6da7a2037d6cd7f6
- SHA512 5e8e193d527b1ef566484812239f78fb9911f0170e96e8782da1cc7d545ef801a716e87fdbbe1ef47e8cf0d91fb4ba084dfd06271c82d1c3e7158eee76583ecf
- SSDEEP 24576:4hfDc6X3lQM3xr4cQFTj0OZeVJkhGNntHl550U0rvtZpBZmV+J:zul13qcQFTIOZe0ANn9lP0JDdb
- TLSH T1FE45E01AFAF0C032C02352B19D2AE358A2B5F47148264857BBDDA71D2FB41D39735BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1