2026-07-20_982ec729c2b38c977480eb92aad6563a_darkgate_elex_maze

General

Target
2026-07-20_982ec729c2b38c977480eb92aad6563a_darkgate_elex_maze
Size 267KB
Sample260720-s5bqpsez4j
SHA256 9a6b7ecf8922c7795bc7282a22fa927dbb580f5bf4e5307d08b249f0131de112
MD5 982ec729c2b38c977480eb92aad6563a
SHA1 95c7147b8e91c14c164ffc5ae0ea68d17f6739eb
SHA512 cad0e24fa2ae1c5647aaf3366d672c945f742d0ded6d6b4bb4b3f9c67427b723a3f8d263633a3310431efcb8333c14ac4bedbfe13f0f0850073326c3a153d710
SSDEEP 6144:K5eUYiBGToKM0WgcPEXsfXEFyhwCT7RY7q++1M:ShY2G5MTgcPEXsfbrEx+1M
TLSH
T11E44BF10BAC6D171DEA7013011F9EF3914BA7A614F308DC7F398076A5931BD27637AAA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_982ec729c2b38c977480eb92aad6563a_darkgate_elex_maze

File Explorer

2026-07-20_982ec729c2b38c977480eb92aad6563a_darkgate_elex_maze

.exe 267KB

2026-07-20_982ec729c2b38c977480eb92aad6563a_darkgate_elex_maze

IMPHASH 617a7ae13bb745c75afd4645e9dd037c
SHA256 9a6b7ecf8922c7795bc7282a22fa927dbb580f5bf4e5307d08b249f0131de112
MD5 982ec729c2b38c977480eb92aad6563a
SHA1 95c7147b8e91c14c164ffc5ae0ea68d17f6739eb
SHA512 cad0e24fa2ae1c5647aaf3366d672c945f742d0ded6d6b4bb4b3f9c67427b723a3f8d263633a3310431efcb8333c14ac4bedbfe13f0f0850073326c3a153d710
SSDEEP 6144:K5eUYiBGToKM0WgcPEXsfXEFyhwCT7RY7q++1M:ShY2G5MTgcPEXsfbrEx+1M
TLSH
T11E44BF10BAC6D171DEA7013011F9EF3914BA7A614F308DC7F398076A5931BD27637AAA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

68991

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary GetPrivateProfileStringW LoadLibraryW GetModuleFileNameW GetLastError GetProcAddress GetModuleHandleW GetFileAttributesW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetVersionExW GetFileSizeEx CloseHandle SetFilePointer SetEndOfFile WriteFile ReadFile DeleteFileW CreateFileW GetFileAttributesExW WaitForSingleObject GetCurrentProcessId LocalFree CreateMutexW Sleep ReleaseMutex CreateDirectoryW GetFileSize HeapAlloc HeapFree GetProcessHeap GetCurrentThreadId FormatMessageW GetCurrentProcess WriteConsoleW SetStdHandle EncodePointer DecodePointer GetCommandLineW IsDebuggerPresent IsProcessorFeaturePresent GetSystemTimeAsFileTime IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError MultiByteToWideChar ExitProcess GetModuleHandleExW WideCharToMultiByte HeapSize RaiseException GetStdHandle GetFileType GetStartupInfoW QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStringTypeW LCMapStringW RtlUnwind LoadLibraryExW HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx OutputDebugStringW FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_982ec729c2b38c977480eb92aad6563a_darkgate_elex_maze

kernel32

generic