2026-08-08_71c6c80d77972e7f41b9aa7fcc61f2a1_darkgate_elex_mafia_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_71c6c80d77972e7f41b9aa7fcc61f2a1_darkgate_elex_mafia_remcos
Size 2.8MB
Sample260808-dxeeassthw
SHA256 ffd6ab9c78642247c2f404283d7dee33d9729a347a3568653653c882b2b2f6f2
MD5 71c6c80d77972e7f41b9aa7fcc61f2a1
SHA1 82102175ade8662750d4cd663e3c7253a181f58f
SHA512 adf39a2c1bbf9c1a5f4d381a35de931903dab8503c343ee57d56a423f42c13a41b75d21c9fa919fedae51f9e574b81a21ccb74112d867abd2aaa71232cff1fc0
SSDEEP 49152:PbCEsc8QbPYsiPWZHTvs1PNRCgFWf5pw/72oPqNmhfFJucAEN3Ss8iPOIb0P4jKC:Wnc8QbPYsiPWZHTvs1vCgFyw/7TqNmta
TLSH
T1C5D59E25F6566475C1273130824AA7FD99B98F300A35129FA5E03E393FB05D38ABD63B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_71c6c80d77972e7f41b9aa7fcc61f2a1_darkgate_elex_mafia_remcos

File Explorer

2026-08-08_71c6c80d77972e7f41b9aa7fcc61f2a1_darkgate_elex_mafia_remcos

.exe 2.8MB

2026-08-08_71c6c80d77972e7f41b9aa7fcc61f2a1_darkgate_elex_mafia_remcos

IMPHASH 0b8fb48054bb0a8a52c759f93baa1d99
SHA256 ffd6ab9c78642247c2f404283d7dee33d9729a347a3568653653c882b2b2f6f2
MD5 71c6c80d77972e7f41b9aa7fcc61f2a1
SHA1 82102175ade8662750d4cd663e3c7253a181f58f
SHA512 adf39a2c1bbf9c1a5f4d381a35de931903dab8503c343ee57d56a423f42c13a41b75d21c9fa919fedae51f9e574b81a21ccb74112d867abd2aaa71232cff1fc0
SSDEEP 49152:PbCEsc8QbPYsiPWZHTvs1PNRCgFWf5pw/72oPqNmhfFJucAEN3Ss8iPOIb0P4jKC:Wnc8QbPYsiPWZHTvs1vCgFyw/7TqNmta
TLSH
T1C5D59E25F6566475C1273130824AA7FD99B98F300A35129FA5E03E393FB05D38ABD63B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1922972

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Work\GoldenSeabed\Binary\GoldenSeabed.pdb

d3d9

Direct3DCreate9

winmm

PlaySoundA timeGetTime timeEndPeriod timeBeginPeriod mmioRead mmioOpenA mmioWrite mmioCreateChunk mmioClose mmioAdvance mmioAscend mmioSetInfo mmioDescend mmioSeek mmioGetInfo

dinput

DirectInputCreateA

dsound

ord11

kernel32

InitializeCriticalSection InterlockedExchange IsProcessorFeaturePresent GetSystemInfo VirtualAlloc FindResourceW UnmapViewOfFile GetVersionExA WideCharToMultiByte CreateFileW CreateFileMappingA MapViewOfFile OutputDebugStringA GetTempPathA GetTempFileNameA GetModuleHandleA LoadLibraryA GetProcAddress QueryPerformanceFrequency QueryPerformanceCounter LockResource SizeofResource FindResourceA CopyFileA GetFileAttributesA GetCurrentProcessId GetLogicalProcessorInformation SetThreadPriority SetThreadExecutionState SetEvent lstrlenA WaitCommEvent ReadFile WriteFile TerminateThread PurgeComm lstrcmpiA SetupComm CreateEventA SetCommMask SetCommTimeouts LoadResource GetFullPathNameA SetCommState GetCommState GetPrivateProfileStringA GetPrivateProfileIntA SetFileTime GetFileSize GetFileTime GetLocalTime DebugBreak SetEnvironmentVariableA WriteConsoleW CompareStringW GetTimeZoneInformation LCMapStringW IsValidLocale EnumSystemLocalesA Sleep ResumeThread CreateThread MultiByteToWideChar DeleteFileA FindClose FindFirstFileA GetModuleFileNameA CloseHandle GetLastError CreateFileA InterlockedDecrement InterlockedIncrement GetTickCount WaitForSingleObject LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount HeapAlloc GetProcessHeap HeapFree ClearCommError MulDiv lstrlenW LocalFree FormatMessageA GlobalUnlock GlobalLock GlobalAlloc GlobalSize GlobalFree SetLastError CompareStringA GetModuleHandleW GetModuleFileNameW DeactivateActCtx ReleaseActCtx ActivateActCtx FreeLibrary LocalAlloc TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree SetFilePointer FlushFileBuffers LockFile UnlockFile SetEndOfFile DuplicateHandle GetCurrentProcess GetVolumeInformationA GlobalAddAtomA lstrcmpA GlobalFlags GlobalGetAtomNameA FileTimeToSystemTime GetCurrentThreadId GetFileAttributesExA FileTimeToLocalFileTime GetFileSizeEx GetLocaleInfoA GetUserDefaultUILanguage GlobalDeleteAtom lstrcmpW LoadLibraryW GlobalFindAtomA FreeResource GetSystemDirectoryW lstrcpyA GetCurrentDirectoryA GetACP GetCPInfo GetOEMCP GetWindowsDirectoryA GetNumberFormatA GetProfileIntA SearchPathA VirtualProtect GetUserDefaultLCID FindResourceExW EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RtlUnwind ExitProcess RaiseException VirtualQuery HeapReAlloc HeapQueryInformation HeapSize ExitThread GetSystemTimeAsFileTime SetStdHandle GetFileType TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate GetStdHandle GetConsoleCP GetConsoleMode SetHandleCount FreeEnvironmentStringsW GetEnvironmentStringsW IsValidCodePage GetStringTypeW GetLocaleInfoW

user32

GetClassInfoExA RedrawWindow ShowScrollBar GetScrollRange SetScrollRange SetMenu TrackPopupMenu ScrollWindow MapWindowPoints GetMonitorInfoA MonitorFromWindow GetMessagePos GetMessageTime DestroyWindow GetTopWindow EndDeferWindowPos BeginDeferWindowPos SetActiveWindow RemovePropA GetPropA SetPropA GetClassLongA GetCapture IsChild WinHelpA LoadIconW RegisterWindowMessageA EndDialog GetNextDlgTabItem CreateDialogIndirectParamA SetRectEmpty SystemParametersInfoA EnumDisplayMonitors SetLayeredWindowAttributes LoadCursorW FillRect TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetWindowDC BeginPaint EndPaint ShowOwnedPopups DeleteMenu InvalidateRect SetTimer KillTimer InflateRect GetMenuItemInfoA DestroyMenu CopyImage IsRectEmpty OffsetRect IsZoomed SetWindowRgn SetParent DestroyAcceleratorTable CreatePopupMenu WindowFromPoint NotifyWinEvent GetAsyncKeyState SetClassLongA IntersectRect LoadMenuW GetSystemMenu MessageBeep DrawStateA DrawIconEx DrawEdge DrawFrameControl DrawFocusRect CopyAcceleratorTableA ToAsciiEx MapVirtualKeyA GetKeyboardLayout GetKeyboardState LoadAcceleratorsW CreateAcceleratorTableA GetClassInfoA LockWindowUpdate GetMenuDefaultItem InvertRect HideCaret EnableScrollBar GetIconInfo CallWindowProcA GetNextDlgGroupItem TranslateAcceleratorA InsertMenuItemA LoadAcceleratorsA LoadMenuA ReuseDDElParam UnpackDDElParam DefFrameProcA DefMDIChildProcA DrawMenuBar TranslateMDISysAccel MonitorFromPoint UnionRect IsMenu CreateMenu PostThreadMessageA WaitMessage SetMenuDefaultItem IsClipboardFormatAvailable FrameRect GetUpdateRect OpenClipboard SetClipboardData CloseClipboard EmptyClipboard LoadImageW RegisterClipboardFormatA CopyIcon CharUpperBuffA GetDoubleClickTime IsCharLowerA GetKeyNameTextA MapVirtualKeyExA SubtractRect MapDialogRect DrawIcon DestroyCursor GetWindowRgn GetMenu CopyRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW ModifyMenuA EnableMenuItem CheckMenuItem SetWindowPos SetWindowLongA IsDialogMessageA SendDlgItemMessageA GetDlgItem CheckDlgButton GetScrollPos SetScrollPos SetFocus SetWindowsHookExA CallNextHookEx GetActiveWindow GetKeyState RegisterClassA AdjustWindowRectEx EqualRect DeferWindowPos GetScrollInfo SetCursorPos SetScrollInfo GetCursorPos ValidateRect GetWindowTextLengthA GetFocus RealChildWindowFromPoint GetDlgCtrlID GetClassNameA SetWindowTextA CharUpperA DestroyIcon ClientToScreen UpdateLayeredWindow ScreenToClient PtInRect GetDC ReleaseDC SetWindowPlacement SetCursor GetMessageA RegisterClassExA IsIconic SetCapture SetForegroundWindow GetParent LoadIconA EnumDisplaySettingsA GetClientRect SendMessageA EnumWindows TranslateMessage GetForegroundWindow GetWindowPlacement GetWindowTextA SetRect BringWindowToTop CreateWindowExA PeekMessageA DefWindowProcA GetDesktopWindow ShowWindow IsWindow DispatchMessageA ReleaseCapture IsWindowVisible UpdateWindow LoadCursorA ChangeDisplaySettingsA GetWindowThreadProcessId GetWindow GetWindowRect MoveWindow PostQuitMessage ShowCursor PostMessageA wsprintfA MessageBoxA GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow UnhookWindowsHookEx GetSystemMetrics GetSysColor GetSysColorBrush GetMenuState GetMenuStringA AppendMenuA GetMenuItemID InsertMenuA GetMenuItemCount GetSubMenu RemoveMenu LoadImageA

gdi32

GetDeviceCaps CopyMetaFileA CreateDCA CreateBitmap CreateDIBitmap GetStockObject CreatePen CreateSolidBrush CreatePatternBrush CreateCompatibleBitmap CreateRectRgnIndirect BitBlt EnumFontFamiliesA GetTextCharsetInfo SaveDC RestoreDC SetPolyFillMode SetROP2 GetClipBox ExcludeClipRect IntersectClipRect LineTo GetLayout SetLayout SelectClipRgn SetPixelV GetTextFaceA CreateRectRgn GetViewportExtEx GetWindowExtEx GetPixel RectVisible TextOutA Escape StretchBlt SetPixel Rectangle EnumFontFamiliesExA LPtoDP SetDIBColorTable GetRgnBox OffsetRgn GetSystemPaletteEntries RealizePalette GetNearestPaletteIndex GetPaletteEntries CreatePalette DPtoLP SetRectRgn Polygon Ellipse Polyline CreateEllipticRgn PatBlt GetTextColor GetBkColor CombineRgn CreatePolygonRgn CreateRoundRectRgn CreateHatchBrush GetObjectType SelectPalette ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject DeleteObject CreateFontIndirectA GetTextExtentPoint32A CreateCompatibleDC CreateDIBSection DeleteDC GetObjectA GetObjectW GetCharacterPlacementA GetCharacterPlacementW SetTextColor SetBkColor SetBkMode GetTextMetricsA GetTextMetricsW GetFontLanguageInfo CreateFontIndirectW SetTextAlign SetMapMode ExtTextOutA MoveToEx ExtTextOutW GetWindowOrgEx GetViewportOrgEx PtInRegion FillRgn FrameRgn GetBoundsRect ExtFloodFill SetPaletteEntries PtVisible

advapi32

RegDeleteValueA RegDeleteKeyA RegOpenKeyExA RegSetValueExA RegCloseKey RegQueryValueExA RegCreateKeyExA RegOpenKeyA RegEnumKeyExA

ole32

DoDragDrop OleGetClipboard RegisterDragDrop CoLockObjectExternal CoTaskMemFree CreateStreamOnHGlobal OleLockRunning IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor CoInitializeEx CoUninitialize CoCreateInstance CoInitialize OleDuplicateData CoTaskMemAlloc ReleaseStgMedium RevokeDragDrop

oleaut32

VariantInit VarBstrFromDate SysAllocStringLen SysStringLen VariantTimeToSystemTime SystemTimeToVariantTime SysAllocString VariantChangeType VariantClear SysFreeString

msimg32

AlphaBlend TransparentBlt

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootA PathFindFileNameA PathFindExtensionA PathRemoveFileSpecW PathIsUNCA

binkw32

_BinkCopyToBufferRect@44 _BinkCopyToBuffer@28 _BinkDoFrameAsyncWait@8 _BinkNextFrame@4 _BinkSetVolume@12 _BinkSetSoundOnOff@8 _BinkClose@4 _BinkOpen@8 _BinkStartAsyncThread@8 _BinkGoto@12 _BinkWaitStopAsyncThread@4 _BinkDoFrameAsync@12 _BinkSetSoundSystem@8 _BinkOpenDirectSound@4 _BinkRequestStopAsyncThread@4

winscard

SCardListReadersA SCardTransmit SCardDisconnect SCardGetStatusChangeA SCardConnectA SCardEndTransaction SCardEstablishContext

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

gdiplus

GdipGetImageGraphicsContext GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePalette GdipGetImagePaletteSize GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipCloneImage GdipDrawImageI GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdiplusShutdown GdiplusStartup GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipDeleteGraphics GdipAlloc GdipFree GdipBitmapUnlockBits

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winspool.drv

OpenPrinterA ClosePrinter DocumentPropertiesA

comdlg32

GetFileTitleA

shell32

SHGetFileInfoA SHBrowseForFolderA SHAppBarMessage DragQueryFileA DragFinish ShellExecuteA SHGetSpecialFolderLocation SHGetPathFromIDListA SHGetDesktopFolder

generic

count=1, id=152, version=20115,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=61, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=209, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=398, id=171, productName=VS2010 SP1 build 40219, version=40219,

count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=38, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=28, version=9178,

count=12, id=95, version=2067,

count=6, id=18, version=8444,

count=137, id=29, version=9178,

count=7, id=25, version=9210,

count=855, id=1, productName=Unmarked objects,

count=44, id=175, version=40219,

count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,