General
- Target 2026-07-06_2401b7a683159528b704dc98b8294ea4_bkransomware_coinminer_darkgate_elex_maze
- Size 4.9MB
- Sample260706-19pgcshy3n
- SHA256 7f765874bdf48a8368fc910e23b85b225db7c9c26b78a8112fe657b34528169f
- MD5 2401b7a683159528b704dc98b8294ea4
- SHA1 897df6f24cf4d8339bc73372f5cfd5f82e991fbf
- SHA512 988ac8d7cf37915549bbeb0cc2af0eaa1b9881138eda39812f6897e6269b26780322acf19574fdf05fca0b3506b3f3f8aed0b64bfc9e876878ccc4d7948e30d9
- SSDEEP 98304:4XCemtVkFsnmGQEiI6Hi7zBaoLssa7mfyiWZouBmisE/FLOAkGkzdnEVomFHKnP:4yem0OiWimfyiumisE/FLOyomFHKnP
- TLSH T10236AE31BB2D6437E6D25133899E622FD9EDAC2D0731078761D13A3925703D3AD3AA27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_2401b7a683159528b704dc98b8294ea4_bkransomware_coinminer_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_2401b7a683159528b704dc98b8294ea4_bkransomware_coinminer_darkgate_elex_maze.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_2401b7a683159528b704dc98b8294ea4_bkransomware_coinminer_darkgate_elex_maze
- Size 4.9MB
- SHA256 7f765874bdf48a8368fc910e23b85b225db7c9c26b78a8112fe657b34528169f
- MD5 2401b7a683159528b704dc98b8294ea4
- SHA1 897df6f24cf4d8339bc73372f5cfd5f82e991fbf
- SHA512 988ac8d7cf37915549bbeb0cc2af0eaa1b9881138eda39812f6897e6269b26780322acf19574fdf05fca0b3506b3f3f8aed0b64bfc9e876878ccc4d7948e30d9
- SSDEEP 98304:4XCemtVkFsnmGQEiI6Hi7zBaoLssa7mfyiWZouBmisE/FLOAkGkzdnEVomFHKnP:4yem0OiWimfyiumisE/FLOyomFHKnP
- TLSH T10236AE31BB2D6437E6D25133899E622FD9EDAC2D0731078761D13A3925703D3AD3AA27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE