2026-07-23_7b1b37c5592353dd386328a955920cc8_darkgate_elex_maze

General

Target
2026-07-23_7b1b37c5592353dd386328a955920cc8_darkgate_elex_maze
Size 764KB
Sample260723-kabhfsthph
SHA256 315ffcfdcb9bc659c229eb2f9c0a6f3f8a88d39797ce9ae0ace623ac6fc1073c
MD5 7b1b37c5592353dd386328a955920cc8
SHA1 705e2e2c0f5ef79ab8c659fa960694c1b4e7bdd0
SHA512 847e65625430d033a4b1930517211e1a7d48a345bb95bf7dc02fbde6dc309416b8954bdedbc96111f0eece6c9225375ffeee13b950bcfde3e0b19a320c8b6268
SSDEEP 12288:1PBtxAjsvHUPMc2aXjr4JxEFWURKccdliQoiQshsLeFsQi:R7F8EcHXjUoFkdlbtIeFb
TLSH
T196F4AF11B682C0BBC5720072081AB72A55FBB9714F715DE7A7E81B0E4E746C2AF37366
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_7b1b37c5592353dd386328a955920cc8_darkgate_elex_maze

File Explorer

2026-07-23_7b1b37c5592353dd386328a955920cc8_darkgate_elex_maze

.exe 764KB

2026-07-23_7b1b37c5592353dd386328a955920cc8_darkgate_elex_maze

IMPHASH e055bc8b9bf7e9efe95f8b3b36734ddc
SHA256 315ffcfdcb9bc659c229eb2f9c0a6f3f8a88d39797ce9ae0ace623ac6fc1073c
MD5 7b1b37c5592353dd386328a955920cc8
SHA1 705e2e2c0f5ef79ab8c659fa960694c1b4e7bdd0
SHA512 847e65625430d033a4b1930517211e1a7d48a345bb95bf7dc02fbde6dc309416b8954bdedbc96111f0eece6c9225375ffeee13b950bcfde3e0b19a320c8b6268
SSDEEP 12288:1PBtxAjsvHUPMc2aXjr4JxEFWURKccdliQoiQshsLeFsQi:R7F8EcHXjUoFkdlbtIeFb
TLSH
T196F4AF11B682C0BBC5720072081AB72A55FBB9714F715DE7A7E81B0E4E746C2AF37366
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

387322

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameW WideCharToMultiByte GetSystemInfo GetLocalTime FreeLibrary FormatMessageA GetLastError GetProcAddress GetModuleFileNameA LoadLibraryExA LoadLibraryW MultiByteToWideChar Sleep GetSystemTimeAsFileTime SetEnvironmentVariableA WriteConsoleW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetStringTypeW CreateFileW DeleteFileW GetFileAttributesW GetFileAttributesExW SetEndOfFile SetFilePointerEx CloseHandle DeviceIoControl GetModuleHandleW MoveFileExW AreFileApisANSI LocalFree HeapFree HeapReAlloc IsDebuggerPresent IsProcessorFeaturePresent RtlUnwind GetTempPathA ReadFile DuplicateHandle GetCurrentProcess CreateProcessA ExitProcess GetModuleHandleExW GetCommandLineW RaiseException HeapAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapSize GetStdHandle GetFileType FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode IsValidCodePage GetACP GetOEMCP GetCurrentThreadId GetProcessHeap ReadConsoleW GetCurrentProcessId WaitForSingleObject GetExitCodeProcess CreatePipe GetTimeZoneInformation LoadLibraryExW QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle OutputDebugStringW

user32

wsprintfW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_7b1b37c5592353dd386328a955920cc8_darkgate_elex_maze

kernel32

user32

generic