General
- Target 2026-09-08_edee962040d466b9910e8426ea40b94a_darkgate_elex_emotet_mafia
- Size 2.2MB
- Sample260910-cat1ssv1fv
- SHA256 68686069654d4b62e271c1b902a630ab1790c4e78d25da16bdaac46b0372177e
- MD5 edee962040d466b9910e8426ea40b94a
- SHA1 cb81f7f3322269e477ddfa0a5cd8a1e227e67e2c
- SHA512 b3d35ba8a130d2d49b3cb856827b5eeeb96260509657a8fcdc42d3e7a39f50247b64ebe86c192f3ed3dc841695f82c6311351c2ae31c86542dd864225e9f95c1
- SSDEEP 49152:IT3Aj0CZ3AJNLy4IJnsyRgPr5qfPHR0eh//lQgXMOhQXNWKWnhHzlVd2PtUjRaW6:Zj0CZ3CLyzJLRgPr5qfPHR0e5/SgmgKL
- TLSH T136B5BF32769180BAC233F1708A4EA3FDF3EA96704975524756901F3D2E745A3992C3AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_edee962040d466b9910e8426ea40b94a_darkgate_elex_emotet_mafia.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_edee962040d466b9910e8426ea40b94a_darkgate_elex_emotet_mafia.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_edee962040d466b9910e8426ea40b94a_darkgate_elex_emotet_mafia
- Size 2.2MB
- SHA256 68686069654d4b62e271c1b902a630ab1790c4e78d25da16bdaac46b0372177e
- MD5 edee962040d466b9910e8426ea40b94a
- SHA1 cb81f7f3322269e477ddfa0a5cd8a1e227e67e2c
- SHA512 b3d35ba8a130d2d49b3cb856827b5eeeb96260509657a8fcdc42d3e7a39f50247b64ebe86c192f3ed3dc841695f82c6311351c2ae31c86542dd864225e9f95c1
- SSDEEP 49152:IT3Aj0CZ3AJNLy4IJnsyRgPr5qfPHR0eh//lQgXMOhQXNWKWnhHzlVd2PtUjRaW6:Zj0CZ3CLyzJLRgPr5qfPHR0e5/SgmgKL
- TLSH T136B5BF32769180BAC233F1708A4EA3FDF3EA96704975524756901F3D2E745A3992C3AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application