General
- Target 2026-07-06_912595c41d2c62ad7f6b881298cadf4a_bkransomware_darkgate_elex_maze
- Size 15.3MB
- Sample260706-zh16eahv9k
- SHA256 032cfe439b6aa473faf68c82453e2be994bb16a96c7b2735cf7d91800fb0cb45
- MD5 912595c41d2c62ad7f6b881298cadf4a
- SHA1 d547373256dcf628c700ef969b7a84ecce53df8f
- SHA512 af63f399eaac7e5a5809faac33d5783f4ddbdbc8f3bd987bdd8e06409d941bb59dc3f24cd31427b18877fd764186bad67848a7f0b6825dd3777c0d317187d8f3
- SSDEEP 196608:hi7vt28Snh0BFRmQyHPE7LutHXSucJBkrNmudVW6luxUnsN9YhFnEBkapbNnJ:h2oh0BOHHPUylRgBkrAu9luWElN
- TLSH T134F633E026601073D5AAF2705BF8BA346C585771A93787CBA3CDBE1909BA5C0DE35372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_912595c41d2c62ad7f6b881298cadf4a_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_912595c41d2c62ad7f6b881298cadf4a_bkransomware_darkgate_elex_maze.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_912595c41d2c62ad7f6b881298cadf4a_bkransomware_darkgate_elex_maze
- Size 15.3MB
- SHA256 032cfe439b6aa473faf68c82453e2be994bb16a96c7b2735cf7d91800fb0cb45
- MD5 912595c41d2c62ad7f6b881298cadf4a
- SHA1 d547373256dcf628c700ef969b7a84ecce53df8f
- SHA512 af63f399eaac7e5a5809faac33d5783f4ddbdbc8f3bd987bdd8e06409d941bb59dc3f24cd31427b18877fd764186bad67848a7f0b6825dd3777c0d317187d8f3
- SSDEEP 196608:hi7vt28Snh0BFRmQyHPE7LutHXSucJBkrNmudVW6luxUnsN9YhFnEBkapbNnJ:h2oh0BOHHPUylRgBkrAu9luWElN
- TLSH T134F633E026601073D5AAF2705BF8BA346C585771A93787CBA3CDBE1909BA5C0DE35372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Drops file in System32 directory