2026-08-10_89678b6488723493f568726d12e623bb_darkgate_elex_maze_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_89678b6488723493f568726d12e623bb_darkgate_elex_maze_stealc
Size 6.9MB
Sample260810-e4gnnsvzax
SHA256 89b7246b199dd12db7fca098d5c222deabb402668457d6e6151adf85da0fdea1
MD5 89678b6488723493f568726d12e623bb
SHA1 d9dc905e084241894cb72ffe29c5ba97c1610020
SHA512 7427b5e6502e669facd1f365e2dbd1fbbcc81a30ab887414a1d79cef08a1e7d27be9a48d52651bce8e7f338e45a67dbb794eb68c38d963079ddd4abd1c88ee25
SSDEEP 196608:sTxLLFwDx7p0TtkgYCHptWuDym4OrTfGmvTQXcVfwQzJc:CmQqgRGmXOiQXcRwQzJc
TLSH
T14676F132B290D016D05701F33559ABA541B87F70087A588FBF94BF1DBEB4AC2EA16B17
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_89678b6488723493f568726d12e623bb_darkgate_elex_maze_stealc

File Explorer

2026-08-10_89678b6488723493f568726d12e623bb_darkgate_elex_maze_stealc

.exe 6.9MB

2026-08-10_89678b6488723493f568726d12e623bb_darkgate_elex_maze_stealc

IMPHASH b01fb81141d8f0f08e92686b362db785
SHA256 89b7246b199dd12db7fca098d5c222deabb402668457d6e6151adf85da0fdea1
MD5 89678b6488723493f568726d12e623bb
SHA1 d9dc905e084241894cb72ffe29c5ba97c1610020
SHA512 7427b5e6502e669facd1f365e2dbd1fbbcc81a30ab887414a1d79cef08a1e7d27be9a48d52651bce8e7f338e45a67dbb794eb68c38d963079ddd4abd1c88ee25
SSDEEP 196608:sTxLLFwDx7p0TtkgYCHptWuDym4OrTfGmvTQXcVfwQzJc:CmQqgRGmXOiQXcRwQzJc
TLSH
T14676F132B290D016D05701F33559ABA541B87F70087A588FBF94BF1DBEB4AC2EA16B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

347958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleMode CloseHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter WriteFile GetModuleFileNameW ReadFile GetStdHandle GetProcessHeap GetACP IsValidCodePage GetCurrentThreadId IsDebuggerPresent HeapSize SetFilePointerEx HeapReAlloc LoadLibraryExW OutputDebugStringW SetStdHandle WriteConsoleW ReadConsoleW CreateFileW IsValidLocale GetCurrentThread GlobalMemoryStatus EnumSystemLocalesW OpenFileMappingA GetModuleHandleA GetOEMCP IsDBCSLeadByteEx FlushFileBuffers GetStartupInfoW GetOverlappedResult GetTimeZoneInformation LeaveCriticalSection GetConsoleCP TlsSetValue ExitProcess GetTickCount ConnectNamedPipe WaitForSingleObject SetEndOfFile MapViewOfFile GetEnvironmentVariableW GetFileType GetModuleHandleExW GetUserDefaultLCID WideCharToMultiByte EncodePointer DecodePointer EnterCriticalSection DeleteCriticalSection MultiByteToWideChar GetStringTypeW GetSystemTimeAsFileTime GetLastError HeapFree GetCommandLineW RaiseException RtlUnwind GetCPInfo HeapAlloc IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsFree GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW

user32

CheckMenuItem MsgWaitForMultipleObjects EnumWindows MessageBoxA MessageBoxW RegisterClassW DestroyIcon SetCursor PostQuitMessage LoadStringA GetWindowInfo BeginPaint WaitMessage GetDC ShowCursor CreateDialogIndirectParamA CheckMenuRadioItem ReleaseDC EndDialog DefWindowProcA GetDesktopWindow AppendMenuA RemoveMenu InsertMenuA EndMenu DialogBoxParamA ValidateRect

gdi32

DeleteDC GetBkColor ExtCreatePen MoveToEx PolyPolygon TranslateCharsetInfo LineTo CreateHatchBrush StretchBlt CopyEnhMetaFileA CreateHalftonePalette GetEnhMetaFileHeader SetPixel DeleteObject PtInRegion PolyPolyline CombineRgn CreateCompatibleBitmap Ellipse GetObjectType CreateBitmapIndirect GetDIBColorTable GetTextExtentExPointA GetTextExtentPointA RoundRect SetTextAlign GetPixel CreateEnhMetaFileW UpdateColors CreatePolygonRgn

advapi32

GetLengthSid RegQueryValueExW

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_89678b6488723493f568726d12e623bb_darkgate_elex_maze_stealc

kernel32

user32

gdi32

advapi32

ole32

generic