General

  • Target
    2026-11-07_07ca270fc67e92ac5d0be76a1583c440_bkransomware_darkgate_elex_glassworm_maze_remcos
  • Size 2.7MB
  • Sample261107-vveqqafd84
  • SHA256 761ef0d64091f81d6fab9919c59906d0fc2a1362856ae5cbbda4033710dd1be4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 2026-11-07_07ca270fc67e92ac5d0be76a1583c440_bkransomware_darkgate_elex_glassworm_maze_remcos
    .exe 2.7MB

2026-11-07_07ca270fc67e92ac5d0be76a1583c440_bkransomware_darkgate_elex_glassworm_maze_remcos

  • IMPHASH 52a33f069139be87cca4a7ed77682dcc
  • SHA256 761ef0d64091f81d6fab9919c59906d0fc2a1362856ae5cbbda4033710dd1be4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
61:39:35:d7:ed:72:de:43:66:9b:d8:3e:64:25:b4:46:f5:c7:30:86:8b:ef:74:f3:e8:c6:55:4a:5f:de:d2:cf
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91540195754285145H,CN=Wondershare Technology Group Co.\,Ltd,O=Wondershare Technology Group Co.\,Ltd,L=拉萨市,ST=西藏自治区,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#0c0fe8a5bfe8978fe887aae6b2bbe58cba,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Digest
9d:7b:bc:e4:b3:95:18:1f:80:fe:e1:a9:0b:3a:1f:7f:6c:fa:7c:97
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91540195754285145H,CN=Wondershare Technology Group Co.\,Ltd,O=Wondershare Technology Group Co.\,Ltd,L=拉萨市,ST=西藏自治区,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#0c0fe8a5bfe8978fe887aae6b2bbe58cba,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
1223581
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
G:\devops_yanfa\workspace\p-4663c901377d457795e7a5c44ce670aa\src\bin\WAE_AR.pdb