General

  • Target
    2026-08-19_c20eb829f2dda473b6526fe755a56765_darkgate_elex_maze_rokrat
  • Size 1.7MB
  • Sample260819-e32mfsythv
  • SHA256 9a0e7532ad4377efef6cd0628abd431a95e3efa9502601b901f5315a776e0d2b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-08-19_c20eb829f2dda473b6526fe755a56765_darkgate_elex_maze_rokrat
    .exe 1.7MB

2026-08-19_c20eb829f2dda473b6526fe755a56765_darkgate_elex_maze_rokrat

  • IMPHASH 4294aecbae468bfdff39c7fc1a76dcb0
  • SHA256 9a0e7532ad4377efef6cd0628abd431a95e3efa9502601b901f5315a776e0d2b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3a:85:99:54:fe:91:ba:dd:c0:93:95:5b:05:77:28:e4:47:b9:5c:10:6e:53:dd:17:59:83:4c:74:ed:a2:0c:b4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Beijing Venustech Cybervision Co.\, Ltd.,O=Beijing Venustech Cybervision Co.\, Ltd.,ST=Beijing,C=CN
Digest
ee:54:ba:e8:92:91:b3:91:ff:31:b2:9a:8f:cb:1e:07:80:62:14:79
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Beijing Venustech Cybervision Co.\, Ltd.,O=Beijing Venustech Cybervision Co.\, Ltd.,ST=Beijing,C=CN
Minor OS version
1
Major OS version
5
Entry point
667274
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\GitLab-Runner\YTH-Package\builds\F1HvV6JyH\0\integration\client-win-base\Release\EdrViewer.pdb