Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 09:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_d79c3adfac3d8c19507300c4edc9f249_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_d79c3adfac3d8c19507300c4edc9f249_bkransomware_darkgate_elex_maze.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-23_d79c3adfac3d8c19507300c4edc9f249_bkransomware_darkgate_elex_maze.exe
- Size 2.9MB
- Sample260723-lr5cjavfkd
- SHA256 852d8893f5f3bab70711ba769b2f0788fe46ce14d5c532249857a79e8d535416
- MD5 d79c3adfac3d8c19507300c4edc9f249
- SHA1 3f0f3dcc34113cb3414db0c5f7235cf3421825c9
- SHA512 8efde7d3e9c8372653894f6e5b5d5c806caf3c22f76b20818b696ace5dda97ed997db53dc27a34baf7a35fd400a6c31bda26b2ec1f4e4bdbb6f5fe730ee5e2a0
- SSDEEP 49152:C1syafjJhchx78UsA3b6YXT9GsjVQa8a+x5l1z2xq/SYsW6O5AA5SFYTGZA7Zjc+:+sXJhcJ3bNXT9e2xq/SYs9OKAPFjc6R2
- TLSH T1B8E57C2079428172D6670172ADAEBB6F485CAAB10B78D4C3B3C45E1F2DB46D32F35297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-23_d79c3adfac3d8c19507300c4edc9f249_bkransomware_darkgate_elex_maze.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-23_d79c3adfac3d8c19507300c4edc9f249_bkransomware_darkgate_elex_maze.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-23_d79c3adfac3d8c19507300c4edc9f249_bkransomware_darkgate_elex_maze.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4872