General
- Target 2026-07-13_5e3f0744428998cb5ad0d298fc9557ad_darkgate_elex_remcos_stop
- Size 2.1MB
- Sample260714-bq8cpab16m
- SHA256 6c2c806b672cf37e0746a22d4815f6274ade15554d1963159fbb2df1df44571f
- MD5 5e3f0744428998cb5ad0d298fc9557ad
- SHA1 0c33958de64cc7ad883f884d218b3f709aa19cf4
- SHA512 dc301203c80e7c9f33444866884df7e78b0cf63d7ff7145e7a93689db16c494df5e335db7dc2ec5f156f09137d7abd939c4d2b31e44cb5f489cf7229e2e92785
- SSDEEP 49152:z7HWKsVtDLznoAwdi5V8AEVOhTuCDJQXhMRfeCKo5s7t0izs:HWxnDL5wdin8AafcevbFY
- TLSH T1B6A5CF1173D28136D4B30671D7BAABAAD539B631632842C7B3841F191E712E2BF3935B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_5e3f0744428998cb5ad0d298fc9557ad_darkgate_elex_remcos_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_5e3f0744428998cb5ad0d298fc9557ad_darkgate_elex_remcos_stop.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_5e3f0744428998cb5ad0d298fc9557ad_darkgate_elex_remcos_stop
- Size 2.1MB
- SHA256 6c2c806b672cf37e0746a22d4815f6274ade15554d1963159fbb2df1df44571f
- MD5 5e3f0744428998cb5ad0d298fc9557ad
- SHA1 0c33958de64cc7ad883f884d218b3f709aa19cf4
- SHA512 dc301203c80e7c9f33444866884df7e78b0cf63d7ff7145e7a93689db16c494df5e335db7dc2ec5f156f09137d7abd939c4d2b31e44cb5f489cf7229e2e92785
- SSDEEP 49152:z7HWKsVtDLznoAwdi5V8AEVOhTuCDJQXhMRfeCKo5s7t0izs:HWxnDL5wdin8AafcevbFY
- TLSH T1B6A5CF1173D28136D4B30671D7BAABAAD539B631632842C7B3841F191E712E2BF3935B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.