Analysis
- max time kernel
150s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/08/2026, 03:50
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-01_06688b3859f344cc1f0edee8d3b3892b_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_06688b3859f344cc1f0edee8d3b3892b_bkransomware_darkgate_elex_maze.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-08-01_06688b3859f344cc1f0edee8d3b3892b_bkransomware_darkgate_elex_maze.exe
- Size 3.7MB
- Sample260801-eed69adc57
- SHA256 58fdad11fa21760e212bec93f1f4a1df1216c6841ba8a3019a2ca27d3c4d90b2
- MD5 06688b3859f344cc1f0edee8d3b3892b
- SHA1 a0be31c01b94e21b37849c53ae724019501ecdd1
- SHA512 69a4c0af6edebc638a68a70bdacec1ca370f3cfc24c71772bb724c63b0dcb09391043f419a33b378a0551e3e2d61b12a3d45fc3ea24b9987f571d5a56dfb03bf
- SSDEEP 98304:r+UEViAhcDM3gebvoSL7UzXqoiCWGP+Fm3sKFLOAkGkzdnEVomFHKnPHj:r+PsdhRiCWGP+cFLOyomFHKnPHj
- TLSH T1B406BF617D8D803AD46312724EAE767C917EBDA0273501DB32943E2E6E71FC35A39923
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-01_06688b3859f344cc1f0edee8d3b3892b_bkransomware_darkgate_elex_maze.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-01_06688b3859f344cc1f0edee8d3b3892b_bkransomware_darkgate_elex_maze.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-01_06688b3859f344cc1f0edee8d3b3892b_bkransomware_darkgate_elex_maze.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5460