General
- Target 2026-08-10_7c0d80f14bfe25f68918c0e9681aefd6_darkgate_elex_hawkeye_remcos_wannacry
- Size 30.7MB
- Sample260810-e84c8svzhz
- SHA256 f894c080a222e70964f0c132928b85a8164e5a6d3665d07864db027cffae072c
- MD5 7c0d80f14bfe25f68918c0e9681aefd6
- SHA1 ece7aa6a890faf69b43231a91c138efd6dbc256e
- SHA512 db24fac492ec38d96c041924dd699538c128a1d5d428fd516d9bd5d90a418be087f19a6b2e84cb69fb188a228a46899c159f2eea25f6889b76739a749cfde0b3
- SSDEEP 196608:kFlfFlVFlfFlVFlfFlVFlfFlVFlfFlVFlfFlVFlfFlVFlfFlVFlfFlPql:i3Z3Z3Z3Z3Z3Z3Z3Z3Yl
- TLSH T19667F14AFD8740B0ED3A60700CDBE27B49357F36C0268D69FACABB067A33E61541E556
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_7c0d80f14bfe25f68918c0e9681aefd6_darkgate_elex_hawkeye_remcos_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_7c0d80f14bfe25f68918c0e9681aefd6_darkgate_elex_hawkeye_remcos_wannacry.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_7c0d80f14bfe25f68918c0e9681aefd6_darkgate_elex_hawkeye_remcos_wannacry
- Size 30.7MB
- SHA256 f894c080a222e70964f0c132928b85a8164e5a6d3665d07864db027cffae072c
- MD5 7c0d80f14bfe25f68918c0e9681aefd6
- SHA1 ece7aa6a890faf69b43231a91c138efd6dbc256e
- SHA512 db24fac492ec38d96c041924dd699538c128a1d5d428fd516d9bd5d90a418be087f19a6b2e84cb69fb188a228a46899c159f2eea25f6889b76739a749cfde0b3
- SSDEEP 196608:kFlfFlVFlfFlVFlfFlVFlfFlVFlfFlVFlfFlVFlfFlVFlfFlVFlfFlPql:i3Z3Z3Z3Z3Z3Z3Z3Z3Yl
- TLSH T19667F14AFD8740B0ED3A60700CDBE27B49357F36C0268D69FACABB067A33E61541E556
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1