General
- Target 2026-11-09_8436b53bcfd96b69efff9fb99f62d2ee_elex_glassworm_mafia_remcos
- Size 1.1MB
- Sample261110-rf3mfsbs2z
- SHA256 392134d32067b708dc8323f1f20645587244a3eec63a2408601df6ebc49d56a5
- MD5 8436b53bcfd96b69efff9fb99f62d2ee
- SHA1 450d125e05924abc171c40632ebf0b7ae7df31b5
- SHA512 4532624b0d9e5f12516a2c1e13dfa7329b7150c45b6922bdcb652949c35cf3051a90fbee4185241bb7b7c4e03e8525615a1b21e6225daf8e23dd6fceba25b95c
- SSDEEP 24576:Nt7heIP3N02aRTnQRMNIogDIopcudCcPE9tFoS3zb8CKa:BeIPd0ZTQRND8opnxPEhoL
- TLSH T1CB45E0297EF0D032C03742749D1AD358A5B9F47288264887FBDC676D2F702D29B39B96
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-09_8436b53bcfd96b69efff9fb99f62d2ee_elex_glassworm_mafia_remcos.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_8436b53bcfd96b69efff9fb99f62d2ee_elex_glassworm_mafia_remcos
- Size 1.1MB
- SHA256 392134d32067b708dc8323f1f20645587244a3eec63a2408601df6ebc49d56a5
- MD5 8436b53bcfd96b69efff9fb99f62d2ee
- SHA1 450d125e05924abc171c40632ebf0b7ae7df31b5
- SHA512 4532624b0d9e5f12516a2c1e13dfa7329b7150c45b6922bdcb652949c35cf3051a90fbee4185241bb7b7c4e03e8525615a1b21e6225daf8e23dd6fceba25b95c
- SSDEEP 24576:Nt7heIP3N02aRTnQRMNIogDIopcudCcPE9tFoS3zb8CKa:BeIPd0ZTQRND8opnxPEhoL
- TLSH T1CB45E0297EF0D032C03742749D1AD358A5B9F47288264887FBDC676D2F702D29B39B96
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1