General

  • Target
    2026-08-17_fe48dcdff77f4094d71ca3f312089ce4_bkransomware_darkgate_elex_floxif_maze
  • Size 1.9MB
  • Sample260817-ph7yvabc43
  • SHA256 2371f13f13002e470b47f36e6ae792e7256af186cf366a06742ede1d7ded677c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 2026-08-17_fe48dcdff77f4094d71ca3f312089ce4_bkransomware_darkgate_elex_floxif_maze
    .exe 1.9MB

2026-08-17_fe48dcdff77f4094d71ca3f312089ce4_bkransomware_darkgate_elex_floxif_maze

  • IMPHASH 6af75807a4193dc657b2ad68e62caa68
  • SHA256 2371f13f13002e470b47f36e6ae792e7256af186cf366a06742ede1d7ded677c
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
2b:1f:eb:92:4b:a7:99:19:ba:b4:8b:c5:7e:49:91:60:a8:ba:07:96:f8:f9:01:cb:f7:c3:d3:33:89:a4:70:bc
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=91130302MA09JH3X4Y,CN=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,OU=IT,O=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,L=秦皇岛市,ST=河北省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e6b5b7e6b8afe58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b2b3e58c97e79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
1
Major OS version
5
Entry point
1211676
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths