General
- Target 2026-05-28_6abd338d55ef465cd4b85ec8b84231fa_bkransomware_darkgate_elex_maze
- Size 2.3MB
- Sample260528-ch9ffsdv2k
- SHA256 b0363e19adac2867f897b3cff915cd4252faca9fa2a788a89bd34755d3ecede6
- MD5 6abd338d55ef465cd4b85ec8b84231fa
- SHA1 09ebeb8c449e96bf1adaaab147a4cbb8c82aefa8
- SHA512 4f84976371101bd29149b02012ac740def561b4562ffeafd96eda20991214e22c4c67db90cda052dcb0cf9e73355fe01d3ac28ee994cda65210c3cb67717a00c
- SSDEEP 49152:gf3ZoG3UCj5qzWt2skmzb2R3NBHCYcMKCqy+XyTmp6ICDmg27RnWGj:IZP3UCj50WtQwb2R3N9cMKCqy+XSD52j
- TLSH T1F0B5BF32F590807BC67317718F9CB36866ADBB710B75424733951E6D3E70883AA39A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_6abd338d55ef465cd4b85ec8b84231fa_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_6abd338d55ef465cd4b85ec8b84231fa_bkransomware_darkgate_elex_maze.exe
Resource
win11-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_6abd338d55ef465cd4b85ec8b84231fa_bkransomware_darkgate_elex_maze
- Size 2.3MB
- SHA256 b0363e19adac2867f897b3cff915cd4252faca9fa2a788a89bd34755d3ecede6
- MD5 6abd338d55ef465cd4b85ec8b84231fa
- SHA1 09ebeb8c449e96bf1adaaab147a4cbb8c82aefa8
- SHA512 4f84976371101bd29149b02012ac740def561b4562ffeafd96eda20991214e22c4c67db90cda052dcb0cf9e73355fe01d3ac28ee994cda65210c3cb67717a00c
- SSDEEP 49152:gf3ZoG3UCj5qzWt2skmzb2R3NBHCYcMKCqy+XyTmp6ICDmg27RnWGj:IZP3UCj50WtQwb2R3N9cMKCqy+XSD52j
- TLSH T1F0B5BF32F590807BC67317718F9CB36866ADBB710B75424733951E6D3E70883AA39A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1