General
- Target 2026-07-21_e7db50a30d159ea1fda813db8b9cfc35_bkransomware_darkgate_elex_maze_rhadamanthys_smoke-loader
- Size 764KB
- Sample260721-ea1vfsft6x
- SHA256 b83e6f24e696bf4e2eb0d45a70734ab2e8f61935cdd331814800f91e31906fd7
- MD5 e7db50a30d159ea1fda813db8b9cfc35
- SHA1 cbc3df25578f6cea7226e31149cff87435d9b900
- SHA512 9ddee14b99b32d3a09297468bd454dc9988997f0fd64f06545f4c215f5c61405ee36c2e8d71214ddaf6a2694396555c415b04c4c892f473662ef580f5efc8fcb
- SSDEEP 12288:Gtymff2j6Ba5K9ryJa3v+VGCC1fTPtKEgo4hgDJ5hPpZThwXC74r7:wc6BKKY8fMCBTFKJo4IPpZThwS8n
- TLSH T1CDF4122377D18032E4A24A3258A6AEA11738FD721E24DA173798754F9CB42C1FEB7753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_e7db50a30d159ea1fda813db8b9cfc35_bkransomware_darkgate_elex_maze_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_e7db50a30d159ea1fda813db8b9cfc35_bkransomware_darkgate_elex_maze_rhadamanthys_smoke-loader
- Size 764KB
- SHA256 b83e6f24e696bf4e2eb0d45a70734ab2e8f61935cdd331814800f91e31906fd7
- MD5 e7db50a30d159ea1fda813db8b9cfc35
- SHA1 cbc3df25578f6cea7226e31149cff87435d9b900
- SHA512 9ddee14b99b32d3a09297468bd454dc9988997f0fd64f06545f4c215f5c61405ee36c2e8d71214ddaf6a2694396555c415b04c4c892f473662ef580f5efc8fcb
- SSDEEP 12288:Gtymff2j6Ba5K9ryJa3v+VGCC1fTPtKEgo4hgDJ5hPpZThwXC74r7:wc6BKKY8fMCBTFKJo4IPpZThwS8n
- TLSH T1CDF4122377D18032E4A24A3258A6AEA11738FD721E24DA173798754F9CB42C1FEB7753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1