General
- Target 2026-07-16_ae4033ac93dbabc8858965c0f740ac31_bkransomware_darkgate_elex_maze
- Size 2.3MB
- Sample260716-l7bedsh16n
- SHA256 4f198e500bcecc9a81c456bafa1427bedd9a2e45096efe4b13156a91bf29c70e
- MD5 ae4033ac93dbabc8858965c0f740ac31
- SHA1 b98cfc4d33ccc88c64e541f45a0f0ed79bb0af93
- SHA512 caca73198b0297a39a4f2a0e664e107ec24726bd1cced3883713117c4643db96b277a8901eabb3a00878ccfee1fe6c67730d4a5e48a12c2e6a1178d83927d24e
- SSDEEP 49152:FDIO4NNMqeZLoF8CoIjWWWVv0YOrIvOhYacqg90RBiTOG+FRAQgAT76sQuE:9IfNNMqSL1CoIjWWWVUD2acqg90RBEq0
- TLSH T15AB5BF31F59080B7C17323319E5D736876FDBF700B35825B27A51E2D6E70582AA29BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_ae4033ac93dbabc8858965c0f740ac31_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_ae4033ac93dbabc8858965c0f740ac31_bkransomware_darkgate_elex_maze
- Size 2.3MB
- SHA256 4f198e500bcecc9a81c456bafa1427bedd9a2e45096efe4b13156a91bf29c70e
- MD5 ae4033ac93dbabc8858965c0f740ac31
- SHA1 b98cfc4d33ccc88c64e541f45a0f0ed79bb0af93
- SHA512 caca73198b0297a39a4f2a0e664e107ec24726bd1cced3883713117c4643db96b277a8901eabb3a00878ccfee1fe6c67730d4a5e48a12c2e6a1178d83927d24e
- SSDEEP 49152:FDIO4NNMqeZLoF8CoIjWWWVv0YOrIvOhYacqg90RBiTOG+FRAQgAT76sQuE:9IfNNMqSL1CoIjWWWVUD2acqg90RBEq0
- TLSH T15AB5BF31F59080B7C17323319E5D736876FDBF700B35825B27A51E2D6E70582AA29BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1