General
- Target 2026-07-13_e45e3a5757f09daa357ee7ea00f61f0d_darkgate_elex_mafia_remcos_stop
- Size 942KB
- Sample260713-eyshzsby3j
- SHA256 b6efd5bde1c7c419e72f85467039944dc111bad76c695bda3070c8c85372c505
- MD5 e45e3a5757f09daa357ee7ea00f61f0d
- SHA1 cc31ed39927920611f4262fbd21f22e9fb1e4326
- SHA512 c52cc4764e3af19f5f166827ccebcdb7640cf9386a7f2ac1bdcaec340453b1900b88d67d164fcd9c3540fdf637b15cb14c8f33f44a29635a7c2b50d0bd86c04f
- SSDEEP 12288:S3YQIInBW8B2AcpwFZV3ioZNdPmpRVIgFllUHmrB8Dzs5urTQRpLVLYQ8T8Oa:SoCA0c3oZNFUIgFzUHY63s5urT0L2Q5L
- TLSH T1F22539307BE541B4E3B2257799B58A159729FDE9073581EFA9801C3F387A5C2DA38323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_e45e3a5757f09daa357ee7ea00f61f0d_darkgate_elex_mafia_remcos_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_e45e3a5757f09daa357ee7ea00f61f0d_darkgate_elex_mafia_remcos_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_e45e3a5757f09daa357ee7ea00f61f0d_darkgate_elex_mafia_remcos_stop
- Size 942KB
- SHA256 b6efd5bde1c7c419e72f85467039944dc111bad76c695bda3070c8c85372c505
- MD5 e45e3a5757f09daa357ee7ea00f61f0d
- SHA1 cc31ed39927920611f4262fbd21f22e9fb1e4326
- SHA512 c52cc4764e3af19f5f166827ccebcdb7640cf9386a7f2ac1bdcaec340453b1900b88d67d164fcd9c3540fdf637b15cb14c8f33f44a29635a7c2b50d0bd86c04f
- SSDEEP 12288:S3YQIInBW8B2AcpwFZV3ioZNdPmpRVIgFllUHmrB8Dzs5urTQRpLVLYQ8T8Oa:SoCA0c3oZNFUIgFzUHY63s5urT0L2Q5L
- TLSH T1F22539307BE541B4E3B2257799B58A159729FDE9073581EFA9801C3F387A5C2DA38323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE