General
- Target 2026-08-04_4ce09e4a4f02a6a3216197bae2072e70_darkgate_elex_maze_remcos
- Size 1.5MB
- Sample260805-bb6wbasvhz
- SHA256 e124c4195025144ecf8806007174ceb6b9a3e253e0d3fd83ea5108331310046c
- MD5 4ce09e4a4f02a6a3216197bae2072e70
- SHA1 cd794fbea3eebf5c8dd3147aabf14d300ab617a3
- SHA512 07dffe2764f108bc14da73b31ebaa44ad5a865d5b29fc381e2bc40e9ffdf7ab7361351ed0b894e95f6bdd1ab48b6cff9cd90345746fff895d05acaa955888107
- SSDEEP 24576:u5LLakUf83PbpnbA6axLDYm/exPTxi+FF5lQKYDgDJD8DT9/FWC:uVaPf8DpnbA6CISqPdi6lQKUvWC
- TLSH T13C75167077E44074F2B22A7299B44A148729FC994B35D1DFB28C1D2E3B7A992CD74B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_4ce09e4a4f02a6a3216197bae2072e70_darkgate_elex_maze_remcos.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_4ce09e4a4f02a6a3216197bae2072e70_darkgate_elex_maze_remcos.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_4ce09e4a4f02a6a3216197bae2072e70_darkgate_elex_maze_remcos
- Size 1.5MB
- SHA256 e124c4195025144ecf8806007174ceb6b9a3e253e0d3fd83ea5108331310046c
- MD5 4ce09e4a4f02a6a3216197bae2072e70
- SHA1 cd794fbea3eebf5c8dd3147aabf14d300ab617a3
- SHA512 07dffe2764f108bc14da73b31ebaa44ad5a865d5b29fc381e2bc40e9ffdf7ab7361351ed0b894e95f6bdd1ab48b6cff9cd90345746fff895d05acaa955888107
- SSDEEP 24576:u5LLakUf83PbpnbA6axLDYm/exPTxi+FF5lQKYDgDJD8DT9/FWC:uVaPf8DpnbA6CISqPdi6lQKUvWC
- TLSH T13C75167077E44074F2B22A7299B44A148729FC994B35D1DFB28C1D2E3B7A992CD74B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE