General

  • Target
    2026-08-09_bd5e45b5c18b3dbf6a5b37d3892d2ae6_bkransomware_darkgate_elex_floxif_maze
  • Size 26.8MB
  • Sample260809-fm56dagg59
  • SHA256 05f99e8813228d9512295a8210ed2734909e56db3f63b54f881e05363a8fa4e1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-09_bd5e45b5c18b3dbf6a5b37d3892d2ae6_bkransomware_darkgate_elex_floxif_maze
    .exe 26.8MB

2026-08-09_bd5e45b5c18b3dbf6a5b37d3892d2ae6_bkransomware_darkgate_elex_floxif_maze

  • IMPHASH c90df4cf5babbaa2fae48997fe0264e8
  • SHA256 05f99e8813228d9512295a8210ed2734909e56db3f63b54f881e05363a8fa4e1
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
45:a7:b9:fe:2d:bb:f2:67:54:29:ad:bf:3b:5d:53:01:ba:5d:b8:a8:99:3a:bc:a0:5b:3e:e9:63:3a:da:90:86
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Samsung Electronics CO.\, LTD.,O=Samsung Electronics CO.\, LTD.,L=Suwon,ST=Kyungki-Do,C=KR

PE Signature issue

Digest
40:97:3c:4e:75:44:9d:49:b0:0a:e7:d0:82:eb:5b:fa:35:b4:0f:95
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Samsung Electronics CO.\, LTD.,O=Samsung Electronics CO.\, LTD.,L=Suwon,ST=Kyungki-Do,C=KR
Minor OS version
0
Major OS version
6
Entry point
1226558
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\Git\SamsungUpdate2.2\SRC\Release\SWM_Setup.pdb