General
- Target 2026-11-07_07ca270fc67e92ac5d0be76a1583c440_bkransomware_darkgate_elex_glassworm_maze_remcos
- Size 2.7MB
- Sample261107-vveqqafd84
- SHA256 761ef0d64091f81d6fab9919c59906d0fc2a1362856ae5cbbda4033710dd1be4
- MD5 07ca270fc67e92ac5d0be76a1583c440
- SHA1 2ea1e2a10b1e1f0275b110a80ac3385155622471
- SHA512 03ce2983caeeb5e58a058493c9b36a479ae4fbec914e1165ce2bfec3f618de48e6898bd13a99a061856b5b0850f6b1b512a27c6a8ed293d00a8a669a57d5e92c
- SSDEEP 49152:LLzKRy0WwN/EcXIqIpo2ooFBzo217s0sKZmxkFWTwXoPf6Y0fxfNrBVsGx6:LLzKcYLhKZmeYPfb0fxfNrDy
- TLSH T139D5CF12BBC2C0B7E2A306315426672959BABE700B31C9CF63D43E5C9D319D1E93A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-11-07_07ca270fc67e92ac5d0be76a1583c440_bkransomware_darkgate_elex_glassworm_maze_remcos.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-07_07ca270fc67e92ac5d0be76a1583c440_bkransomware_darkgate_elex_glassworm_maze_remcos.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-07_07ca270fc67e92ac5d0be76a1583c440_bkransomware_darkgate_elex_glassworm_maze_remcos
- Size 2.7MB
- SHA256 761ef0d64091f81d6fab9919c59906d0fc2a1362856ae5cbbda4033710dd1be4
- MD5 07ca270fc67e92ac5d0be76a1583c440
- SHA1 2ea1e2a10b1e1f0275b110a80ac3385155622471
- SHA512 03ce2983caeeb5e58a058493c9b36a479ae4fbec914e1165ce2bfec3f618de48e6898bd13a99a061856b5b0850f6b1b512a27c6a8ed293d00a8a669a57d5e92c
- SSDEEP 49152:LLzKRy0WwN/EcXIqIpo2ooFBzo217s0sKZmxkFWTwXoPf6Y0fxfNrBVsGx6:LLzKcYLhKZmeYPfb0fxfNrDy
- TLSH T139D5CF12BBC2C0B7E2A306315426672959BABE700B31C9CF63D43E5C9D319D1E93A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.