General
- Target 2026-07-16_215e1d0b0d42bcb5b644e56db6dd55f6_bkransomware_darkgate_elex_maze
- Size 2.4MB
- Sample260716-mda27sat7q
- SHA256 66a644e7893857d4d6e13bbefb30140740777eb1780a57aab322fc9972cd457b
- MD5 215e1d0b0d42bcb5b644e56db6dd55f6
- SHA1 8375500a4e092f565a8c39367045bb44ed610a81
- SHA512 8dcf1e16fb7f82e1d46913fa8f195d5003c78e3a549c1aaee08f60ea4663bb7039f270b89c03204970b374a882494f90ec6664059191584725db877f5fac5bdd
- SSDEEP 49152:+9XmdQ5AUIDCo0iNSZvd0GzXoZ5Rem+1cbvz1L+7aG7HwAgAQgAT76sQuE:+4G5AUIX0zZvd0GLoZ561cjpL+7aGBq0
- TLSH T1D4B5BE3279D1907BD67317715E5D7758A2BCBB704B35028B23D41E2E3EB04D2A92CAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_215e1d0b0d42bcb5b644e56db6dd55f6_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_215e1d0b0d42bcb5b644e56db6dd55f6_bkransomware_darkgate_elex_maze
- Size 2.4MB
- SHA256 66a644e7893857d4d6e13bbefb30140740777eb1780a57aab322fc9972cd457b
- MD5 215e1d0b0d42bcb5b644e56db6dd55f6
- SHA1 8375500a4e092f565a8c39367045bb44ed610a81
- SHA512 8dcf1e16fb7f82e1d46913fa8f195d5003c78e3a549c1aaee08f60ea4663bb7039f270b89c03204970b374a882494f90ec6664059191584725db877f5fac5bdd
- SSDEEP 49152:+9XmdQ5AUIDCo0iNSZvd0GzXoZ5Rem+1cbvz1L+7aG7HwAgAQgAT76sQuE:+4G5AUIX0zZvd0GLoZ561cjpL+7aGBq0
- TLSH T1D4B5BE3279D1907BD67317715E5D7758A2BCBB704B35028B23D41E2E3EB04D2A92CAA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1