Analysis
- max time kernel
150s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 09:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_ecea3ceead8278c7217576b52eb54bbe_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_ecea3ceead8278c7217576b52eb54bbe_bkransomware_darkgate_elex_maze.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-23_ecea3ceead8278c7217576b52eb54bbe_bkransomware_darkgate_elex_maze.exe
- Size 2.9MB
- Sample260723-lpwbvaveqa
- SHA256 a5b1c0c5694136d464444bc9f1de855efd57722af4e6122fbc3c3da1d6ebf71b
- MD5 ecea3ceead8278c7217576b52eb54bbe
- SHA1 c2eb452993c3795a6fedcdabd2058c1eccfa4d98
- SHA512 e37f2c205dc54f5b87d8b54d20ad89ce688710cf86aa8596ccee7e896e25d48ad97dc76c476f54e6c875003791f61e3578b3c2946b0b896b9dc964697dc2ac62
- SSDEEP 49152:CXsyafjJhchx78UsA3b6YXT9GsjVQa8a+x5l1z2xq/SYsW6O5AA5SFYTGZA7Zjc+:UsXJhcJ3bNXT9e2xq/SYs9OKAPFjc6R2
- TLSH T1EAE57C2079428172D6670172ADAEBB6F485CAAB10B78D4C3B3C45E1F2DB46D32F35297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-23_ecea3ceead8278c7217576b52eb54bbe_bkransomware_darkgate_elex_maze.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-23_ecea3ceead8278c7217576b52eb54bbe_bkransomware_darkgate_elex_maze.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-23_ecea3ceead8278c7217576b52eb54bbe_bkransomware_darkgate_elex_maze.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5552