2026-07-23_b43cd63d2ddce318c72d205443a2df3a_darkgate_elex_mafia_magniber

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_b43cd63d2ddce318c72d205443a2df3a_darkgate_elex_mafia_magniber
Size 1.6MB
Sample260723-fb69as1dja
SHA256 ab9658e461dcba534d923470315122d95419fb47b38a500ced3a70260f1af67b
MD5 b43cd63d2ddce318c72d205443a2df3a
SHA1 89a6d11e09b67671064bbad8cdf01369ac3acf53
SHA512 50e2550fcfe0c58e9b25fc01d27890c53c4e80719d091bb5612f99ec207cc85f65e4793b724564557bd120a4550faad80700ab88d89b771aba7d44cb35af9c6b
SSDEEP 49152:wV6XE6gwV0GhCgKcCa1XeaB0zj0yjoB2:7ga3CgKcCa1ZB2Yyjl
TLSH
T10B75F121B641C036D4931170AEA8D7AE667CED660B2502C7B3D83E7E4EB4BD25B32357
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_b43cd63d2ddce318c72d205443a2df3a_darkgate_elex_mafia_magniber

File Explorer

2026-07-23_b43cd63d2ddce318c72d205443a2df3a_darkgate_elex_mafia_magniber

.exe 1.6MB

2026-07-23_b43cd63d2ddce318c72d205443a2df3a_darkgate_elex_mafia_magniber

IMPHASH e957a0011b112801e7c56111f79e5232
SHA256 ab9658e461dcba534d923470315122d95419fb47b38a500ced3a70260f1af67b
MD5 b43cd63d2ddce318c72d205443a2df3a
SHA1 89a6d11e09b67671064bbad8cdf01369ac3acf53
SHA512 50e2550fcfe0c58e9b25fc01d27890c53c4e80719d091bb5612f99ec207cc85f65e4793b724564557bd120a4550faad80700ab88d89b771aba7d44cb35af9c6b
SSDEEP 49152:wV6XE6gwV0GhCgKcCa1XeaB0zj0yjoB2:7ga3CgKcCa1ZB2Yyjl
TLSH
T10B75F121B641C036D4931170AEA8D7AE667CED660B2502C7B3D83E7E4EB4BD25B32357
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

178166

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

G:\Jenkins\workspace\buildDriverWithParameter\Windows\Core\Release\ES2DevEdit.pdb

kernel32

GetModuleFileNameW GetModuleHandleW CreateMutexW CloseHandle LocalFree GetCurrentProcess GetTickCount GetPrivateProfileStringW InitializeCriticalSection GetVersionExW LeaveCriticalSection GetPrivateProfileIntW GetProcAddress EnterCriticalSection GetLocalTime GlobalMemoryStatusEx DeleteCriticalSection GetCurrentThreadId GetCurrentProcessId CreateDirectoryW WideCharToMultiByte FindClose HeapReAlloc HeapAlloc HeapFree GetProcessHeap VerSetConditionMask LoadLibraryW VerifyVersionInfoW FlushFileBuffers SetStdHandle WriteConsoleW CreateFileW SetFilePointer IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID ReadFile GetConsoleMode FindNextFileW FindFirstFileW MultiByteToWideChar DeleteFileW GetConsoleCP IsValidCodePage GetOEMCP GetACP GetLocaleInfoW HeapSize IsProcessorFeaturePresent IsDebuggerPresent SetEndOfFile UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime QueryPerformanceCounter HeapCreate SetLastError TlsFree TlsSetValue InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange GetStringTypeW EncodePointer DecodePointer Sleep GetCommandLineW HeapSetInformation GetStartupInfoW GetLastError RaiseException GetCPInfo RtlUnwind LCMapStringW SetUnhandledExceptionFilter ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType TlsAlloc TlsGetValue

user32

LoadCursorW PostQuitMessage LoadStringW ChangeWindowMessageFilter GetMessageW UpdateWindow ShowWindow CreateWindowExW RegisterClassExW TranslateMessage LoadIconW DispatchMessageW DefWindowProcW

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

shell32

CommandLineToArgvW SHGetSpecialFolderPathW

imagehlp

MakeSureDirectoryPathExists

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

shlwapi

PathFileExistsW PathFindFileNameW PathAppendW PathIsDirectoryW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_b43cd63d2ddce318c72d205443a2df3a_darkgate_elex_mafia_magniber

kernel32

user32

advapi32

shell32

imagehlp

version

shlwapi

generic