General
- Target 2026-07-02_d377696b35657edbbaf26bbf77246e9c_darkgate_elex_hawkeye_maze_remcos
- Size 804KB
- Sample260702-txmzfaex6p
- SHA256 92d1a93d9218529a7497322335bde42dfdef0360d65b8d06d044bcff272f2420
- MD5 d377696b35657edbbaf26bbf77246e9c
- SHA1 ec92042ee1df078d38b78624064040b7c56b1d52
- SHA512 db19ee87440336893d07c73d96c02ec288357a522444771a04678b16eab22df935e5d7f23c256c7c08d53e72dd1bc536c8edea0b3b0e3f1aad0cc45f623ecde6
- SSDEEP 24576:pAL3lQlesPsa5Ux5bc5cjSP8W7jyOFx7HWev8vcjBaF:iiITbc625fFlf8vcjBaF
- TLSH T1F0059E12B6C2C072E5630131566DB72298FDBD320A35954B73D81B4E1EBD8C2BE2B767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_d377696b35657edbbaf26bbf77246e9c_darkgate_elex_hawkeye_maze_remcos.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_d377696b35657edbbaf26bbf77246e9c_darkgate_elex_hawkeye_maze_remcos.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_d377696b35657edbbaf26bbf77246e9c_darkgate_elex_hawkeye_maze_remcos
- Size 804KB
- SHA256 92d1a93d9218529a7497322335bde42dfdef0360d65b8d06d044bcff272f2420
- MD5 d377696b35657edbbaf26bbf77246e9c
- SHA1 ec92042ee1df078d38b78624064040b7c56b1d52
- SHA512 db19ee87440336893d07c73d96c02ec288357a522444771a04678b16eab22df935e5d7f23c256c7c08d53e72dd1bc536c8edea0b3b0e3f1aad0cc45f623ecde6
- SSDEEP 24576:pAL3lQlesPsa5Ux5bc5cjSP8W7jyOFx7HWev8vcjBaF:iiITbc625fFlf8vcjBaF
- TLSH T1F0059E12B6C2C072E5630131566DB72298FDBD320A35954B73D81B4E1EBD8C2BE2B767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.