General
- Target 2026-07-22_ce952efa2022d0d39307cc9d54a936a2_bkransomware_darkgate_elex_maze
- Size 2.4MB
- Sample260722-283s2aam6x
- SHA256 ad68aa66a88402db3a96e729d01a796b35a74e806aa6d38c567dd3d591b51111
- MD5 ce952efa2022d0d39307cc9d54a936a2
- SHA1 d550dfb351e66a12983cc59a6284ad75e7c1d3ba
- SHA512 33d22094b8f6a6b7475f63c8486d07c0503036bc2f1f60b9a77273dc341d6a1f89db01a67ffc62c273fdc9dd14aea699d02ce0a265614c946cd1584efa18f42c
- SSDEEP 49152:uQM0WrzrYW3KHIU4idjFEp4OQHmQ/GmKZyf2JJCfsBxrDmg27RnWGj:vM0WrzkWaHOidjFEp4Oc/GmK8f2JJdD6
- TLSH T151B5BF3275E0D076C5332B368B5CB329A5ADBB704B75434733E50E2D2DF0583AA296A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_ce952efa2022d0d39307cc9d54a936a2_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_ce952efa2022d0d39307cc9d54a936a2_bkransomware_darkgate_elex_maze
- Size 2.4MB
- SHA256 ad68aa66a88402db3a96e729d01a796b35a74e806aa6d38c567dd3d591b51111
- MD5 ce952efa2022d0d39307cc9d54a936a2
- SHA1 d550dfb351e66a12983cc59a6284ad75e7c1d3ba
- SHA512 33d22094b8f6a6b7475f63c8486d07c0503036bc2f1f60b9a77273dc341d6a1f89db01a67ffc62c273fdc9dd14aea699d02ce0a265614c946cd1584efa18f42c
- SSDEEP 49152:uQM0WrzrYW3KHIU4idjFEp4OQHmQ/GmKZyf2JJCfsBxrDmg27RnWGj:vM0WrzkWaHOidjFEp4Oc/GmK8f2JJdD6
- TLSH T151B5BF3275E0D076C5332B368B5CB329A5ADBB704B75434733E50E2D2DF0583AA296A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1