General
- Target 2026-08-13_75857a1d32c087f04ff46d77b8c0fbe8_darkgate_elex_mafia_remcos_stop
- Size 696KB
- Sample260813-p4ffqay1d1
- SHA256 77e012bbaae7f3f459d2e1b1ecc7b5bc0f649d6c7cc708a235b088130e15d5b7
- MD5 75857a1d32c087f04ff46d77b8c0fbe8
- SHA1 7bfbcb669870d0123775eb5b26c4e222d7ca84df
- SHA512 f798b2189344720849e722c79890853641410dc054164824bfc2b082798cdfae6ae4c5a7924d51d45f9fd4c89f04e12464b46730afdd8169444aa7b55e3f4f24
- SSDEEP 12288:fo1URiFqmNt2lnrBFQqK654vUtvbxa5HAJsiciEp1VxKfV7/ccjMQb78SNAgbTT:fsL2lrBFQqKP8Xa5gJzciEp1VxKfV7/z
- TLSH T19EE4F6F653AC5212E6B267311870413249273FD99B3D82DB718CA43D0F639CAAAF571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_75857a1d32c087f04ff46d77b8c0fbe8_darkgate_elex_mafia_remcos_stop.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_75857a1d32c087f04ff46d77b8c0fbe8_darkgate_elex_mafia_remcos_stop.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_75857a1d32c087f04ff46d77b8c0fbe8_darkgate_elex_mafia_remcos_stop
- Size 696KB
- SHA256 77e012bbaae7f3f459d2e1b1ecc7b5bc0f649d6c7cc708a235b088130e15d5b7
- MD5 75857a1d32c087f04ff46d77b8c0fbe8
- SHA1 7bfbcb669870d0123775eb5b26c4e222d7ca84df
- SHA512 f798b2189344720849e722c79890853641410dc054164824bfc2b082798cdfae6ae4c5a7924d51d45f9fd4c89f04e12464b46730afdd8169444aa7b55e3f4f24
- SSDEEP 12288:fo1URiFqmNt2lnrBFQqK654vUtvbxa5HAJsiciEp1VxKfV7/ccjMQb78SNAgbTT:fsL2lrBFQqKP8Xa5gJzciEp1VxKfV7/z
- TLSH T19EE4F6F653AC5212E6B267311870413249273FD99B3D82DB718CA43D0F639CAAAF571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE