General
- Target 2026-07-06_deb7a3f30e05bffc6de2f4b6ff0cb39c_darkgate_elex_floxif_glassworm_maze_remcos
- Size 2.2MB
- Sample260707-atap6aev2y
- SHA256 923ade6cc5568c45826861502fa2b1da1742235707127526041e6829bef20d27
- MD5 deb7a3f30e05bffc6de2f4b6ff0cb39c
- SHA1 b0fc233a58a7d86ed6fb4625023717bcb8f9c597
- SHA512 d51b4574ac308da2f25544beb5d0bda2f7016584d0cea3e7abd797dd6b30055274a81f1029b5e2a883b6dcb013e373f6d829404f93d54bc93c20302aeac72e8c
- SSDEEP 49152:IKEzNX8Qv0raZGjxl/TjSvSUK93Ie/JqTTvFMBNSa4LF1Sy:IKEzNVv0rl6vSUK1Ies6BN4
- TLSH T17FB5CF63BBC1C0B6E2A20230546AA7254AFEBE75573089CF53D43E1D5D706C2E93A367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_deb7a3f30e05bffc6de2f4b6ff0cb39c_darkgate_elex_floxif_glassworm_maze_remcos.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_deb7a3f30e05bffc6de2f4b6ff0cb39c_darkgate_elex_floxif_glassworm_maze_remcos.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_deb7a3f30e05bffc6de2f4b6ff0cb39c_darkgate_elex_floxif_glassworm_maze_remcos
- Size 2.2MB
- SHA256 923ade6cc5568c45826861502fa2b1da1742235707127526041e6829bef20d27
- MD5 deb7a3f30e05bffc6de2f4b6ff0cb39c
- SHA1 b0fc233a58a7d86ed6fb4625023717bcb8f9c597
- SHA512 d51b4574ac308da2f25544beb5d0bda2f7016584d0cea3e7abd797dd6b30055274a81f1029b5e2a883b6dcb013e373f6d829404f93d54bc93c20302aeac72e8c
- SSDEEP 49152:IKEzNX8Qv0raZGjxl/TjSvSUK93Ie/JqTTvFMBNSa4LF1Sy:IKEzNVv0rl6vSUK1Ies6BN4
- TLSH T17FB5CF63BBC1C0B6E2A20230546AA7254AFEBE75573089CF53D43E1D5D706C2E93A367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.