General
- Target 2026-07-14_f98838abe65b39065984ac16a10ad47e_darkgate_elex_mafia_remcos_stop
- Size 942KB
- Sample260714-genf2aex9p
- SHA256 eb00a491b24a0e5d1ab4fde80f48faf9b3f6931a87d7d357fe28b261fd5afd31
- MD5 f98838abe65b39065984ac16a10ad47e
- SHA1 924347921bea35ff5e51359cd9d68b3ed8b49949
- SHA512 caa58541e496632b9d119d16f2387c465dc337596bb775054469997b9c38cbbe6259d9a2c2bd3e2c87297820c6d4ee14d210b8290fa8b10362595db297d8fdc2
- SSDEEP 12288:43YQIInBW8B2AcpwFZV3ioZNdPmpRVIgFllUHmrB8Dzs5urTQRpLVLYQ8T8OS:4oCA0c3oZNFUIgFzUHY63s5urT0L2Q5j
- TLSH T1502539307BE541B4E3B2257799B58A159729FDE9073581EFA9801C3F387A5C2DA38323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_f98838abe65b39065984ac16a10ad47e_darkgate_elex_mafia_remcos_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_f98838abe65b39065984ac16a10ad47e_darkgate_elex_mafia_remcos_stop.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_f98838abe65b39065984ac16a10ad47e_darkgate_elex_mafia_remcos_stop
- Size 942KB
- SHA256 eb00a491b24a0e5d1ab4fde80f48faf9b3f6931a87d7d357fe28b261fd5afd31
- MD5 f98838abe65b39065984ac16a10ad47e
- SHA1 924347921bea35ff5e51359cd9d68b3ed8b49949
- SHA512 caa58541e496632b9d119d16f2387c465dc337596bb775054469997b9c38cbbe6259d9a2c2bd3e2c87297820c6d4ee14d210b8290fa8b10362595db297d8fdc2
- SSDEEP 12288:43YQIInBW8B2AcpwFZV3ioZNdPmpRVIgFllUHmrB8Dzs5urTQRpLVLYQ8T8OS:4oCA0c3oZNFUIgFzUHY63s5urT0L2Q5j
- TLSH T1502539307BE541B4E3B2257799B58A159729FDE9073581EFA9801C3F387A5C2DA38323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE