General
- Target 2026-08-03_844d76c027605bd695e53f3ef2309d4f_bkransomware_darkgate_elex_maze
- Size 2.3MB
- Sample260803-rqzcsasakb
- SHA256 389c2d1da7d47d63c1c6ffd357ae73b466cb25f6308dc361be2c07e16d01e97d
- MD5 844d76c027605bd695e53f3ef2309d4f
- SHA1 28e912126429c615275377f857e5d961c866f74c
- SHA512 dcb7f06ab836636cfe472d1addd573b6e3a0a14970787f99fb1772ffdd8c408970953b0cb10fb22be6797f89e32cab4f076926ca32e136f1027cbce3da26e2d6
- SSDEEP 49152:Dnhjm5M5WFr/aIB47PqN9O9FMmnrBJNyvy6hWAhby8djaLNiXicJFFRGNzj3:Thjm5M5irrB47PqNo9rfNyvy6hWAhbyh
- TLSH T1E6B5BF3279D1D076D53317315E5D7329A2ADBB704B35068B12E50F2D2EB0983AA3DBA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_844d76c027605bd695e53f3ef2309d4f_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_844d76c027605bd695e53f3ef2309d4f_bkransomware_darkgate_elex_maze
- Size 2.3MB
- SHA256 389c2d1da7d47d63c1c6ffd357ae73b466cb25f6308dc361be2c07e16d01e97d
- MD5 844d76c027605bd695e53f3ef2309d4f
- SHA1 28e912126429c615275377f857e5d961c866f74c
- SHA512 dcb7f06ab836636cfe472d1addd573b6e3a0a14970787f99fb1772ffdd8c408970953b0cb10fb22be6797f89e32cab4f076926ca32e136f1027cbce3da26e2d6
- SSDEEP 49152:Dnhjm5M5WFr/aIB47PqN9O9FMmnrBJNyvy6hWAhby8djaLNiXicJFFRGNzj3:Thjm5M5irrB47PqNo9rfNyvy6hWAhbyh
- TLSH T1E6B5BF3279D1D076D53317315E5D7329A2ADBB704B35068B12E50F2D2EB0983AA3DBA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1