General
- Target 2026-05-17_f43f690525c851853a421d7e2e864ca9_darkgate_elex_maze_remcos
- Size 1.4MB
- Sample260517-tkd6rsaz9s
- SHA256 b64de27ef57d823f90aff436d346525548c96b23fb8e6617c6b2ee3f6cbf80a3
- MD5 f43f690525c851853a421d7e2e864ca9
- SHA1 8f4825b77232e9e58988a976d508771a7ff9ac52
- SHA512 225d48cadf970bec1275bca9c595a15f46e52ba6241138cb55848f260f3aa1f528f69b88d9132760573afc3d6f2595691dd1c4c49bdf1f78cd94719b38146e42
- SSDEEP 12288:AP+F/GVHBD6qSL0+WDiA+yIVi0a6cL51kpvYmrMWZQzjpLcvGXxd1:AP+F4H73+WDiF9ZajbkpoWZmL0GXx/
- TLSH T1F565F8306BE04070F2B226B2997859049729FDD94B3590DFB68C1D1F3B7A9C2DA75B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-17_f43f690525c851853a421d7e2e864ca9_darkgate_elex_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_f43f690525c851853a421d7e2e864ca9_darkgate_elex_maze_remcos.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_f43f690525c851853a421d7e2e864ca9_darkgate_elex_maze_remcos
- Size 1.4MB
- SHA256 b64de27ef57d823f90aff436d346525548c96b23fb8e6617c6b2ee3f6cbf80a3
- MD5 f43f690525c851853a421d7e2e864ca9
- SHA1 8f4825b77232e9e58988a976d508771a7ff9ac52
- SHA512 225d48cadf970bec1275bca9c595a15f46e52ba6241138cb55848f260f3aa1f528f69b88d9132760573afc3d6f2595691dd1c4c49bdf1f78cd94719b38146e42
- SSDEEP 12288:AP+F/GVHBD6qSL0+WDiA+yIVi0a6cL51kpvYmrMWZQzjpLcvGXxd1:AP+F4H73+WDiF9ZajbkpoWZmL0GXx/
- TLSH T1F565F8306BE04070F2B226B2997859049729FDD94B3590DFB68C1D1F3B7A9C2DA75B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE