General
- Target 2026-07-06_8f21a48be737aa5f80a758e6e82452c6_bkransomware_darkgate_elex_gcleaner_magniber_maze
- Size 2.9MB
- Sample260707-csxveac14l
- SHA256 c0d7c66f7850bd5dee3460e46aea2c70e52e64b7651c59cf9216dab65a13a3f9
- MD5 8f21a48be737aa5f80a758e6e82452c6
- SHA1 56a33faf9a2bc1fe38acba74a405a0e7d5fb7af6
- SHA512 ec2017f161f93fa8f3d4428cf553ad206c1b780dbd399dd02239cc5a6f7c2351ee5f0f2a554fc68962d2402ebc9e07dee807972ab5bb01f35107319cd4f47881
- SSDEEP 49152:oC6m000+spWJfbDJ60of1joBm0F3CucvNUjKJuDdA1S/PcI/6Q7Y:oTNqyWJp6H9amC3CVFUj518S
- TLSH T1F7D50221E2D0803BD0B345F597AA5775493D7F30272854EBA7C4BD6CAA702E17A3922F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-06_8f21a48be737aa5f80a758e6e82452c6_bkransomware_darkgate_elex_gcleaner_magniber_maze.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_8f21a48be737aa5f80a758e6e82452c6_bkransomware_darkgate_elex_gcleaner_magniber_maze.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_8f21a48be737aa5f80a758e6e82452c6_bkransomware_darkgate_elex_gcleaner_magniber_maze
- Size 2.9MB
- SHA256 c0d7c66f7850bd5dee3460e46aea2c70e52e64b7651c59cf9216dab65a13a3f9
- MD5 8f21a48be737aa5f80a758e6e82452c6
- SHA1 56a33faf9a2bc1fe38acba74a405a0e7d5fb7af6
- SHA512 ec2017f161f93fa8f3d4428cf553ad206c1b780dbd399dd02239cc5a6f7c2351ee5f0f2a554fc68962d2402ebc9e07dee807972ab5bb01f35107319cd4f47881
- SSDEEP 49152:oC6m000+spWJfbDJ60of1joBm0F3CucvNUjKJuDdA1S/PcI/6Q7Y:oTNqyWJp6H9amC3CVFUj518S
- TLSH T1F7D50221E2D0803BD0B345F597AA5775493D7F30272854EBA7C4BD6CAA702E17A3922F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Enigma
-
Detects packed executables observed in Molerats
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.