General
- Target 2026-07-30_f80bd0e1649fa6fdda8ebd3ea32e16a3_bkransomware_darkgate_elex_maze_remcos
- Size 13.1MB
- Sample260730-c6hmmsbn7s
- SHA256 008134a64a0417ebbe3c76323f60d8b7a369d35d01204423b9c44ab07807fb83
- MD5 f80bd0e1649fa6fdda8ebd3ea32e16a3
- SHA1 379455c4bd80fc54b5587d3f85ee390f6641d923
- SHA512 6f2eecc0d75bdc7de385410b11f7f9d4a9c45ed0fb49b1f275373fa9ed595b1a9dea399989e7391aa9f7f5a8346f672e51df7be2333ae8ca506a74a48b34a718
- SSDEEP 196608:Z6cZvFsGffLJ4mcjTYwtoTT4+vMo9yTzfkzL8Y:ZP5FsGHLHf9YTzMP9
- TLSH T149D6BF61B59040F5E5AA16714ADC5259A23CBE34973B03EF718C399E3B304C26F3A76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_f80bd0e1649fa6fdda8ebd3ea32e16a3_bkransomware_darkgate_elex_maze_remcos.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_f80bd0e1649fa6fdda8ebd3ea32e16a3_bkransomware_darkgate_elex_maze_remcos.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_f80bd0e1649fa6fdda8ebd3ea32e16a3_bkransomware_darkgate_elex_maze_remcos
- Size 13.1MB
- SHA256 008134a64a0417ebbe3c76323f60d8b7a369d35d01204423b9c44ab07807fb83
- MD5 f80bd0e1649fa6fdda8ebd3ea32e16a3
- SHA1 379455c4bd80fc54b5587d3f85ee390f6641d923
- SHA512 6f2eecc0d75bdc7de385410b11f7f9d4a9c45ed0fb49b1f275373fa9ed595b1a9dea399989e7391aa9f7f5a8346f672e51df7be2333ae8ca506a74a48b34a718
- SSDEEP 196608:Z6cZvFsGffLJ4mcjTYwtoTT4+vMo9yTzfkzL8Y:ZP5FsGHLHf9YTzMP9
- TLSH T149D6BF61B59040F5E5AA16714ADC5259A23CBE34973B03EF718C399E3B304C26F3A76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.