General

  • Target
    2026-07-05_1a0677485a50dff7259ad4b2db9c7082_darkgate_elex_remcos_stop_swisyn
  • Size 5.3MB
  • Sample260705-g1cawset4j
  • SHA256 b1050a55bf7c051e019824c8e107ec116375f58fe54a8cca5b656ea8977eb2c6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-05_1a0677485a50dff7259ad4b2db9c7082_darkgate_elex_remcos_stop_swisyn
    • Size 5.3MB
    • SHA256 b1050a55bf7c051e019824c8e107ec116375f58fe54a8cca5b656ea8977eb2c6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies visibility of hidden/system files in Explorer

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks