Analysis
- max time kernel
148s - max time network
112s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/09/2026, 16:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe
- Size 2.0MB
- Sample260926-tpbansws7k
- SHA256 5f4d9c8445f311a9dac716bf1fb218c16f650e705067e3cb7111120b18222ff5
- MD5 b665eecd0710655f554935c3d5d0939c
- SHA1 46d2cb17e2c4bbf04b5b431f80c16929c1ac4a3b
- SHA512 6ac1414c858d5841d5296dcc32ee440a685291094c184dd7cb00d83ecb6855713a31418e54d99395d68e4368f2d6556fd380930f1e45b566307935db223af60e
- SSDEEP 49152:gm/XcahG3UefkyQPvT6o1TZqFxQvOOl9w71fJbAFLCoicAk:TXcahG3UOkfvT6o1TZq+OOl9w71fJbkx
- TLSH T1F6A57E2276E09076D53317359A9DB338A2AC7E714635458723D47F2E2DF0483AA2CEA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe - Suspicious use of SetWindowsHookEx 18 IoCs
pid Process 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe 236 2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-26_b665eecd0710655f554935c3d5d0939c_bkransomware_darkgate_elex_maze.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:236