General
- Target 2026-08-03_f617e5ea2b4c9cd9a2d5534106aed5b1_bkransomware_darkgate_elex_maze
- Size 2.3MB
- Sample260803-q1vxnsae48
- SHA256 c0da59c1b4ca5955cf44a96a0ef842c97a807553208c1038b60d8b817c264cc7
- MD5 f617e5ea2b4c9cd9a2d5534106aed5b1
- SHA1 c38bc9534b51ca53cc1fc2a8a490451868319947
- SHA512 fc49e7bf76715c9b77aaa4f85397aa7be553bd867f71fea641ca27b336184b3ac6e312517e8c971d07252d90d9cdcfc73aac7fd7955e422266112916bc10da34
- SSDEEP 49152:Sf3ZoG3UCj5qzWt2skmzb2R3NBHCYcMpCqy+Xyzmp6IvLNiXicJFFRGNzj3:6ZP3UCj50WtQwb2R3N9cMpCqy+Xf7wRI
- TLSH T190B5BF31F590807BC67317718F9DB36863ADBB710B75424723952E6D3E70883AA39A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f617e5ea2b4c9cd9a2d5534106aed5b1_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f617e5ea2b4c9cd9a2d5534106aed5b1_bkransomware_darkgate_elex_maze
- Size 2.3MB
- SHA256 c0da59c1b4ca5955cf44a96a0ef842c97a807553208c1038b60d8b817c264cc7
- MD5 f617e5ea2b4c9cd9a2d5534106aed5b1
- SHA1 c38bc9534b51ca53cc1fc2a8a490451868319947
- SHA512 fc49e7bf76715c9b77aaa4f85397aa7be553bd867f71fea641ca27b336184b3ac6e312517e8c971d07252d90d9cdcfc73aac7fd7955e422266112916bc10da34
- SSDEEP 49152:Sf3ZoG3UCj5qzWt2skmzb2R3NBHCYcMpCqy+Xyzmp6IvLNiXicJFFRGNzj3:6ZP3UCj50WtQwb2R3N9cMpCqy+Xf7wRI
- TLSH T190B5BF31F590807BC67317718F9DB36863ADBB710B75424723952E6D3E70883AA39A63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1