2026-08-22_45da107e0ebda41438305fe09923467a_bkransomware_darkgate_elex_floxif_hijackloader_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-22_45da107e0ebda41438305fe09923467a_bkransomware_darkgate_elex_floxif_hijackloader_maze
Size 1.9MB
Sample260823-k4bqbavepc
SHA256 1064f32f65ba5dfef99e7b5bc33804454a25656a20eca147938c9c46185bd703
MD5 45da107e0ebda41438305fe09923467a
SHA1 fe0d1694892a15179f034a6d6a7f4b015efbaf44
SHA512 8ae0938e3a8e219f1e6799d0a320a38a71707a7557278d2f267fb204f0c4e12f3a7390c513a67691e163a3920c14d1e947aa15693d8215466fac32134f219a4f
SSDEEP 49152:dv+2Q1ipugMbQLU+LFGeezPbDgdV8RVSswyOZWhWbh:d3Q1ipuHbQ1LFRezPEV8bSswyOZb
TLSH
T1BA959E3236E19077D67327316B5C7368B3FCBA700A35469723951E2E2DB0492A93DA73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-22_45da107e0ebda41438305fe09923467a_bkransomware_darkgate_elex_floxif_hijackloader_maze

File Explorer

2026-08-22_45da107e0ebda41438305fe09923467a_bkransomware_darkgate_elex_floxif_hijackloader_maze

.exe 1.9MB

2026-08-22_45da107e0ebda41438305fe09923467a_bkransomware_darkgate_elex_floxif_hijackloader_maze

IMPHASH a7ecfa27f8676d75cb7d4632c88adec4
SHA256 1064f32f65ba5dfef99e7b5bc33804454a25656a20eca147938c9c46185bd703
MD5 45da107e0ebda41438305fe09923467a
SHA1 fe0d1694892a15179f034a6d6a7f4b015efbaf44
SHA512 8ae0938e3a8e219f1e6799d0a320a38a71707a7557278d2f267fb204f0c4e12f3a7390c513a67691e163a3920c14d1e947aa15693d8215466fac32134f219a4f
SSDEEP 49152:dv+2Q1ipugMbQLU+LFGeezPbDgdV8RVSswyOZWhWbh:d3Q1ipuHbQ1LFRezPEV8bSswyOZb
TLSH
T1BA959E3236E19077D67327316B5C7368B3FCBA700A35469723951E2E2DB0492A93DA73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

d9:b8:9e:ee:28:63:81:c7:10:8c:0f:1d:85:fb:43:f3:fa:c6:a0:a0:99:c0:75:ea:16:b3:ef:d1:a3:60:3c:dd

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=PFU Limited,OU=Technology Development Div.,O=PFU Limited,L=Kahoku City,ST=Ishikawa,C=JP

Chains

Apr 26, 2022

CN=PFU Limited,OU=Technology Development Div.,O=PFU Limited,L=Kahoku City,ST=Ishikawa,C=JP

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Serial Number

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 29, 2022 - Mar 14, 2033

Subject

CN=PFU Limited,OU=Technology Development Div.,O=PFU Limited,L=Kahoku City,ST=Ishikawa,C=JP

Serial Number

06:98:de:d8:30:d8:3a:76:56:a1:00:8a:06:2e:ba:5d

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 12, 2022 - Apr 5, 2023

Minor OS version

Major OS version

Entry point

1238432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\owner\Desktop\OLU\1.2.35.3\Prj\Release_sp\SsUSetting.pdb

ssucommon

ord5 ord9 ord33 ord10 ord18 ord21 ord19 ord22 ord1 ord20 ord7 ord30 ord17 ord16 ord23 ord41 ord6 ord4 WriteLog

kernel32

CreateThread ExitThread IsDebuggerPresent IsProcessorFeaturePresent HeapQueryInformation GetSystemInfo VirtualAlloc VirtualQuery SetStdHandle GetFileType GetStdHandle GetStartupInfoW QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsValidCodePage GetACP GetOEMCP GetCPInfo GetStringTypeW GetConsoleCP GetConsoleMode ReadConsoleW SetFilePointerEx OutputDebugStringW LCMapStringW GetSystemTimeAsFileTime WriteConsoleW SetEnvironmentVariableA SizeofResource LockResource LoadResource FindResourceW CreateMutexW GetLastError FindFirstFileW FindClose GetLocaleInfoW GetTimeZoneInformation GetLocalTime SystemTimeToTzSpecificLocalTime GetDateFormatW GetTimeFormatW CreateProcessW ReleaseMutex CloseHandle GetModuleFileNameW HeapReAlloc HeapAlloc HeapFree GetProcessHeap InitializeCriticalSectionAndSpinCount HeapSize DecodePointer DeleteCriticalSection ExpandEnvironmentStringsA GetProcAddress LoadLibraryA GlobalAlloc GlobalSize GlobalLock GlobalUnlock GlobalFree LocalFree MulDiv FormatMessageW CopyFileW SetLastError MultiByteToWideChar WideCharToMultiByte GetCurrentThread GetCurrentThreadId GetCommandLineW FindResourceExW VirtualProtect SearchPathW GetProfileIntW Sleep GetTempPathW GetTempFileNameW VerifyVersionInfoW VerSetConditionMask lstrcpyW GetWindowsDirectoryW GetTickCount GetFileTime GetFileSizeEx GetFileAttributesExW GetFileAttributesW FileTimeToLocalFileTime SetErrorMode lstrcmpiW GetCurrentProcess DuplicateHandle WriteFile UnlockFile SetFilePointer SetEndOfFile ReadFile LockFile GetVolumeInformationW GetVersionExW GetModuleHandleExW ExitProcess RaiseException RtlUnwind FreeLibrary LoadLibraryExW GlobalDeleteAtom GetFullPathNameW GetFileSize FlushFileBuffers CreateFileW DeleteFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage CompareStringW GetCurrentDirectoryW GetThreadLocale FileTimeToSystemTime GlobalGetAtomNameW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GlobalFindAtomW GetSystemDirectoryW LeaveCriticalSection EnterCriticalSection EncodePointer GlobalAddAtomW WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW ResumeThread SetThreadPriority WaitForSingleObject LoadLibraryW GetModuleHandleW GetModuleHandleA OutputDebugStringA FreeResource GetCurrentProcessId lstrcmpW lstrcmpA

user32

DestroyCursor GetWindowRgn DrawIcon CreateMenu SubtractRect GetUpdateRect IsClipboardFormatAvailable TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar FrameRect CharUpperBuffW ModifyMenuW SetMenuDefaultItem CopyIcon GetDoubleClickTime SetClassLongW LockWindowUpdate SetParent SetCursorPos DestroyAcceleratorTable CreateAcceleratorTableW GetKeyboardState ToUnicodeEx MapVirtualKeyExW IsCharLowerW GetKeyboardLayout WaitMessage IsZoomed GetComboBoxInfo TrackMouseEvent ReuseDDElParam UnpackDDElParam InsertMenuItemW TranslateAcceleratorW LoadAcceleratorsW BringWindowToTop MonitorFromPoint UpdateLayeredWindow IsMenu UnionRect SetWindowRgn DrawFrameControl DrawEdge DrawStateW EmptyClipboard SetClipboardData CloseClipboard OpenClipboard EnumDisplayMonitors SetLayeredWindowAttributes PostThreadMessageW NotifyWinEvent InvertRect HideCaret EnableScrollBar GetAsyncKeyState GetIconInfo DrawIconEx LoadImageW SetRectEmpty DrawFocusRect WindowFromPoint GetMenuDefaultItem CreatePopupMenu RegisterClipboardFormatW CharUpperW DestroyIcon IsIconic MessageBeep GetNextDlgGroupItem IsRectEmpty SetRect InvalidateRgn CopyAcceleratorTableW ReleaseCapture SetCapture OffsetRect CharNextW IntersectRect InvalidateRect KillTimer SetTimer RealChildWindowFromPoint DeleteMenu CopyImage LoadCursorW GetSysColorBrush LoadMenuW SystemParametersInfoW InflateRect GetMenuItemInfoW GetSystemMetrics SendDlgItemMessageA IsDialogMessageW SetWindowTextW CheckDlgButton GetDlgItemTextW MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo GetTopWindow GetClassNameW GetClassLongW SetWindowLongW PtInRect EqualRect MapWindowPoints AdjustWindowRectEx GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow GetForegroundWindow UpdateWindow TrackPopupMenu SetMenu GetMenu GetCapture SetFocus GetDlgCtrlID EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement IsChild CreateWindowExW GetClassInfoExW CallWindowProcW DefWindowProcW GetMessageTime GetMessagePos RegisterWindowMessageW CopyRect GetClientRect MapVirtualKeyW GetKeyNameTextW SetCursor ShowOwnedPopups CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect IsWindowVisible PeekMessageW DispatchMessageW TranslateMessage GetMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetDesktopWindow SetActiveWindow GetActiveWindow GetNextDlgTabItem GetDlgItem EndDialog CreateDialogIndirectParamW DestroyWindow IsWindow MapDialogRect GetWindow SetWindowContextHelpId SetWindowPos UnhookWindowsHookEx GetLastActivePopup GetWindowThreadProcessId GetParent GetWindowLongW MessageBoxW IsWindowEnabled FillRect GetSysColor ScreenToClient ClientToScreen EndPaint BeginPaint ReleaseDC GetWindowDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW PostQuitMessage RemoveMenu AppendMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW UnregisterClassW GetFocus GetKeyState PostMessageW InsertMenuW GetSystemMenu GetWindowRect SendMessageW LoadIconW EnableWindow RegisterClassW GetClassInfoW SetForegroundWindow FindWindowW DestroyMenu

gdi32

GetObjectType SetTextColor SetTextAlign GetObjectW MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateRectRgnIndirect PatBlt CreateFontIndirectW GetTextExtentPoint32W CombineRgn GetMapMode SetRectRgn DPtoLP GetBkColor GetTextColor GetRgnBox GetTextMetricsW CreatePalette GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries GetClipBox CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo SetPolyFillMode SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateEllipticRgn Ellipse CreatePolygonRgn Polygon Polyline Rectangle EnumFontFamiliesExW OffsetRgn CreateRoundRectRgn RoundRect FrameRgn PtInRegion SetPixelV ExtFloodFill SetPaletteEntries FillRgn GetBoundsRect GetWindowOrgEx LPtoDP GetViewportOrgEx GetTextFaceW ExcludeClipRect Escape DeleteObject DeleteDC CreateSolidBrush CreateRectRgn CreatePatternBrush CreatePen CreateHatchBrush CreateCompatibleDC CreateBitmap BitBlt GetDeviceCaps CreateDCW RealizePalette CopyMetaFileW GetLayout SetLayout SetMapMode SetBkMode SetBkColor SelectPalette SelectObject ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetStockObject GetPixel SetROP2

msimg32

TransparentBlt AlphaBlend

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegEnumKeyExW RegEnumValueW RegQueryValueW RegEnumKeyW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

SHGetFolderPathW ShellExecuteW SHGetFileInfoW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetDesktopFolder SHBrowseForFolderW DragQueryFileW DragFinish SHAppBarMessage

shlwapi

PathFindExtensionW PathFindFileNameW PathIsUNCW PathStripToRootW StrFormatKBSizeW PathRemoveFileSpecW

uxtheme

CloseThemeData GetThemePartSize GetWindowTheme GetThemeSysColor EnableThemeDialogTexture DrawThemeText DrawThemeParentBackground IsThemeBackgroundPartiallyTransparent IsAppThemed OpenThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName

ole32

CoInitializeEx OleUninitialize OleInitialize CoFreeUnusedLibraries CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject CoDisconnectObject CoInitialize CoCreateInstance CLSIDFromProgID CoCreateGuid CoUninitialize ReleaseStgMedium OleDuplicateData CoRevokeClassObject CoTaskMemFree CoTaskMemAlloc RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning DoDragDrop CreateStreamOnHGlobal CoRegisterMessageFilter OleIsCurrentClipboard OleFlushClipboard CLSIDFromString

oleaut32

OleCreateFontIndirect VarBstrFromDate VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen LoadTypeLi VariantChangeType VariantClear VariantInit SysAllocStringLen SysAllocString SysFreeString

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

gdiplus

GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown GdipDrawImageRectI

imm32

ImmReleaseContext ImmGetContext ImmGetOpenStatus

winmm

PlaySoundW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_45da107e0ebda41438305fe09923467a_bkransomware_darkgate_elex_floxif_hijackloader_maze

PE Signature issue

ssucommon

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

generic