General
- Target 2026-09-08_6939f94e37767ed4f504eb478a8bce3c_darkgate_elex_emotet_mafia
- Size 2.2MB
- Sample260910-ft3zlaff86
- SHA256 abefbb56730ed41f01575c80a117c2ca108e8a8fd8c85c4b2b80a51d7e681f60
- MD5 6939f94e37767ed4f504eb478a8bce3c
- SHA1 95953bfe246fc6db685e74338ab9dd816a1b457c
- SHA512 90cc266d5dd41b3192c26ed960ea79632af2fc94265d7fc081eb2e13a1e5f86616bcba590182854be8a301de3e02f7aac6927cc05163bfbf99f12a8ef867f2c8
- SSDEEP 49152:IT3Aj0CZ3AJNLy4IJnsyRgPr5qfPHR0eh//lQgXMOhQXNWKWnhHzlVd2PtUjRaWG:Zj0CZ3CLyzJLRgPr5qfPHR0e5/SgmgK7
- TLSH T127B5BF32769180BAC233F1708A4EA3FDF3EA96704975524756901F3D2E745A3992C3AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_6939f94e37767ed4f504eb478a8bce3c_darkgate_elex_emotet_mafia.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_6939f94e37767ed4f504eb478a8bce3c_darkgate_elex_emotet_mafia.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_6939f94e37767ed4f504eb478a8bce3c_darkgate_elex_emotet_mafia
- Size 2.2MB
- SHA256 abefbb56730ed41f01575c80a117c2ca108e8a8fd8c85c4b2b80a51d7e681f60
- MD5 6939f94e37767ed4f504eb478a8bce3c
- SHA1 95953bfe246fc6db685e74338ab9dd816a1b457c
- SHA512 90cc266d5dd41b3192c26ed960ea79632af2fc94265d7fc081eb2e13a1e5f86616bcba590182854be8a301de3e02f7aac6927cc05163bfbf99f12a8ef867f2c8
- SSDEEP 49152:IT3Aj0CZ3AJNLy4IJnsyRgPr5qfPHR0eh//lQgXMOhQXNWKWnhHzlVd2PtUjRaWG:Zj0CZ3CLyzJLRgPr5qfPHR0e5/SgmgK7
- TLSH T127B5BF32769180BAC233F1708A4EA3FDF3EA96704975524756901F3D2E745A3992C3AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application