General
- Target 2026-08-04_5dfa5207864ed614965721b6399b6346_darkgate_elex_maze_remcos
- Size 1.5MB
- Sample260805-a8d15avdje
- SHA256 eb37e86019c0c1b58d634374d8cc2d6a21ff43d715b048c70cc1ae7e52f9b21f
- MD5 5dfa5207864ed614965721b6399b6346
- SHA1 6b75a909848b7cbdc88a719981124b59bfc16a8f
- SHA512 5e7d0e815c012a0f0a42faf163824089d95b48ef15578635228e619585ce6e55355bbe709f6965a51a18ff26ace9d524aa56b0a22a816e6386acb1d81aa0451d
- SSDEEP 24576:u5LLakUf83PbpnbA6axLDYm/exPTxi+FF5lQKYDgDJD8DT9/FWx:uVaPf8DpnbA6CISqPdi6lQKUvWx
- TLSH T19575167077E44074F2B22A7299B44A148729FC994B35D1DFB28C1D2E3B7A992CD74B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_5dfa5207864ed614965721b6399b6346_darkgate_elex_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_5dfa5207864ed614965721b6399b6346_darkgate_elex_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_5dfa5207864ed614965721b6399b6346_darkgate_elex_maze_remcos
- Size 1.5MB
- SHA256 eb37e86019c0c1b58d634374d8cc2d6a21ff43d715b048c70cc1ae7e52f9b21f
- MD5 5dfa5207864ed614965721b6399b6346
- SHA1 6b75a909848b7cbdc88a719981124b59bfc16a8f
- SHA512 5e7d0e815c012a0f0a42faf163824089d95b48ef15578635228e619585ce6e55355bbe709f6965a51a18ff26ace9d524aa56b0a22a816e6386acb1d81aa0451d
- SSDEEP 24576:u5LLakUf83PbpnbA6axLDYm/exPTxi+FF5lQKYDgDJD8DT9/FWx:uVaPf8DpnbA6CISqPdi6lQKUvWx
- TLSH T19575167077E44074F2B22A7299B44A148729FC994B35D1DFB28C1D2E3B7A992CD74B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE