General
- Target 2026-05-28_8d9c7a8b0e288bc132ee9dec20a7fbbe_bkransomware_darkgate_elex_maze
- Size 2.4MB
- Sample260528-cteefsfv4s
- SHA256 8a48da20cec6677eec6097729608f76105fc818535335be2535062f9b0e62083
- MD5 8d9c7a8b0e288bc132ee9dec20a7fbbe
- SHA1 8dbd43841bb8701b593ee1ccb9b1bd3493ea5326
- SHA512 9c2a618b684682033060b9950bc336bcb1e6a3ccc0b81c914204244aa6229092b7116b41a802f9d94f9bc4d51a55a5473fecbffa0bd8c5d898164eb8d098a300
- SSDEEP 49152:YdLX12B2xBeT0MMvaoI6PbmW9aqm2pbg790VTpKbdaXs5EX6Dmg27RnWGj:Y+2jeT0MOa4PbmW9aqrgR0VTpKbAED5g
- TLSH T170B5BF3238E0907AE53317719F9D7359A2BDBB705B35018722951E3D2EB1482BE3D6A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_8d9c7a8b0e288bc132ee9dec20a7fbbe_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_8d9c7a8b0e288bc132ee9dec20a7fbbe_bkransomware_darkgate_elex_maze.exe
Resource
win11-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_8d9c7a8b0e288bc132ee9dec20a7fbbe_bkransomware_darkgate_elex_maze
- Size 2.4MB
- SHA256 8a48da20cec6677eec6097729608f76105fc818535335be2535062f9b0e62083
- MD5 8d9c7a8b0e288bc132ee9dec20a7fbbe
- SHA1 8dbd43841bb8701b593ee1ccb9b1bd3493ea5326
- SHA512 9c2a618b684682033060b9950bc336bcb1e6a3ccc0b81c914204244aa6229092b7116b41a802f9d94f9bc4d51a55a5473fecbffa0bd8c5d898164eb8d098a300
- SSDEEP 49152:YdLX12B2xBeT0MMvaoI6PbmW9aqm2pbg790VTpKbdaXs5EX6Dmg27RnWGj:Y+2jeT0MOa4PbmW9aqrgR0VTpKbAED5g
- TLSH T170B5BF3238E0907AE53317719F9D7359A2BDBB705B35018722951E3D2EB1482BE3D6A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1