2026-07-19_15afb8f9856d52b0d3705cf628387f01_bkransomware_darkgate_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-19_15afb8f9856d52b0d3705cf628387f01_bkransomware_darkgate_elex_maze
Size 1.3MB
Sample260720-b85phsev6x
SHA256 b5e8af30b12c6a7913b8e698f1adcf3c3655a78fd63448911ad1801983a2797f
MD5 15afb8f9856d52b0d3705cf628387f01
SHA1 a5b4f1610608fa9681e1e1cba4ec926b1daafef3
SHA512 7d7ae841fca678f45de49785a16360b09c5dc8d6a667e51d6f65a3bc73826b69e987d8664a234243f4483dc896874600f9218c0550f74803682169da7c329c7e
SSDEEP 24576:m+MK/RjduDt3YZ3y7cXVav9Mki7WUtLpwbtLpw:m+njduDtoZ+v9MNbtL2tL
TLSH
T1F1558B11BBE44975F5B3967A9DB2A2589A76BC625F20C2CF2310671E0D33AC0DA35733
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-19_15afb8f9856d52b0d3705cf628387f01_bkransomware_darkgate_elex_maze

File Explorer

2026-07-19_15afb8f9856d52b0d3705cf628387f01_bkransomware_darkgate_elex_maze

.exe 1.3MB

2026-07-19_15afb8f9856d52b0d3705cf628387f01_bkransomware_darkgate_elex_maze

IMPHASH 962619d92d1a3c2ccccb32f6810c20cf
SHA256 b5e8af30b12c6a7913b8e698f1adcf3c3655a78fd63448911ad1801983a2797f
MD5 15afb8f9856d52b0d3705cf628387f01
SHA1 a5b4f1610608fa9681e1e1cba4ec926b1daafef3
SHA512 7d7ae841fca678f45de49785a16360b09c5dc8d6a667e51d6f65a3bc73826b69e987d8664a234243f4483dc896874600f9218c0550f74803682169da7c329c7e
SSDEEP 24576:m+MK/RjduDt3YZ3y7cXVav9Mki7WUtLpwbtLpw:m+njduDtoZ+v9MNbtL2tL
TLSH
T1F1558B11BBE44975F5B3967A9DB2A2589A76BC625F20C2CF2310671E0D33AC0DA35733
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

46171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\toolkit\mozapps\update\updater\updater.pdb

kernel32

FindClose FindNextFileW CloseHandle LocalFree FreeLibrary GetCurrentProcess SetLastError GetDriveTypeW GetPrivateProfileStringW WriteFile GetTimeZoneInformation WriteConsoleW LCMapStringW GetLongPathNameW OutputDebugStringW FlushFileBuffers SetEnvironmentVariableA SetFilePointerEx HeapSize GetFullPathNameW TlsFree TlsSetValue GetTempPathW GetLastError CreateFileW GetFileAttributesW FormatMessageW CopyFileW WideCharToMultiByte OpenProcess WaitForSingleObject MoveFileExW CreateProcessW SetEndOfFile SetFilePointer FindFirstFileW GetTempFileNameW DeactivateActCtx MultiByteToWideChar GetModuleFileNameW Sleep ActivateActCtx CreateActCtxW GetProcAddress GetSystemDirectoryW GetModuleHandleW SetDllDirectoryW CompareStringW LoadLibraryExW TlsGetValue TlsAlloc TerminateProcess InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException LoadLibraryExA GetCommandLineW HeapFree HeapAlloc FileTimeToLocalFileTime GetFileInformationByHandle GetFileType PeekNamedPipe FileTimeToSystemTime IsDebuggerPresent IsProcessorFeaturePresent GetFileAttributesExW SetFileAttributesW EnterCriticalSection LeaveCriticalSection CreateDirectoryW RemoveDirectoryW FindFirstFileExW SystemTimeToTzSpecificLocalTime DeleteFileW EncodePointer DecodePointer CreateThread GetCurrentThreadId ExitThread SetEnvironmentVariableW SetCurrentDirectoryW GetCurrentDirectoryW ReadFile HeapReAlloc ExitProcess GetModuleHandleExW GetProcessHeap GetStdHandle DeleteCriticalSection GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RtlUnwind IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW GetConsoleCP GetConsoleMode SetStdHandle ReadConsoleW

user32

wsprintfW SetTimer ScreenToClient GetWindowRect DrawTextW DialogBoxParamW GetParent GetDC LoadIconW OffsetRect GetWindowLongW ReleaseDC GetDlgItem SetWindowLongW EndDialog GetDesktopWindow SetWindowPos SendMessageW SetWindowTextW CopyRect GetClientRect

gdi32

SelectObject

advapi32

CryptDestroyKey QueryServiceConfigW OpenSCManagerA QueryServiceStatusEx StartServiceW OpenServiceW CloseServiceHandle AdjustTokenPrivileges LookupPrivilegeValueA GetTokenInformation OpenProcessToken CryptHashData CryptDestroyHash CryptCreateHash CryptAcquireContextA CryptReleaseContext CryptGetHashParam RegSetValueExW RegCloseKey RegOpenKeyExW RegQueryValueExW RegCreateKeyExW CryptVerifySignatureA

shell32

ShellExecuteExW

shlwapi

PathRemoveFileSpecW PathStripToRootW PathCommonPrefixW PathAppendW PathUnquoteSpacesW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-19_15afb8f9856d52b0d3705cf628387f01_bkransomware_darkgate_elex_maze

kernel32

user32

gdi32

advapi32

shell32

shlwapi

generic