General
- Target 2026-07-02_ba32d30fa5ac0817aac6be1b37c35ee1_amadey_darkgate_elex_remcos
- Size 16.9MB
- Sample260702-lr2lmsdy7n
- SHA256 097716cccd7eaea913f5a00e8aa86766a73dd06e9bc014523f22d659128fe24a
- MD5 ba32d30fa5ac0817aac6be1b37c35ee1
- SHA1 95734c9e49cd7f1d5df097b3ad3fb0c35cb0ed6a
- SHA512 b29f6ef5237a4f83b511d08e4006ea747ce1f871b2badec37158ddeb40495f64807f86cc5387f970f652267dd889d9a69f35392277ae33bc1a7ac4af072ee8ec
- SSDEEP 393216:DrF+cGTWdg0uoinErF8fMkVWj7Pc88vzB6:DrF+cGEuoinEmfV4xcF6
- TLSH T1D7073853A14C8E32C0C905F7C02C92DFA19D3F72A72255EF6198F9B6B6301857EE5A72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_ba32d30fa5ac0817aac6be1b37c35ee1_amadey_darkgate_elex_remcos.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_ba32d30fa5ac0817aac6be1b37c35ee1_amadey_darkgate_elex_remcos.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_ba32d30fa5ac0817aac6be1b37c35ee1_amadey_darkgate_elex_remcos
- Size 16.9MB
- SHA256 097716cccd7eaea913f5a00e8aa86766a73dd06e9bc014523f22d659128fe24a
- MD5 ba32d30fa5ac0817aac6be1b37c35ee1
- SHA1 95734c9e49cd7f1d5df097b3ad3fb0c35cb0ed6a
- SHA512 b29f6ef5237a4f83b511d08e4006ea747ce1f871b2badec37158ddeb40495f64807f86cc5387f970f652267dd889d9a69f35392277ae33bc1a7ac4af072ee8ec
- SSDEEP 393216:DrF+cGTWdg0uoinErF8fMkVWj7Pc88vzB6:DrF+cGEuoinEmfV4xcF6
- TLSH T1D7073853A14C8E32C0C905F7C02C92DFA19D3F72A72255EF6198F9B6B6301857EE5A72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.