General
- Target 2026-06-02_e0cf69a4beff12c098a77de27d4f67f4_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- Sample260602-qsaa1afv9m
- SHA256 d2d57733bef41bb9170f2134f5c396f512a5e58fef081b702a7c9b8ac497fa91
- MD5 e0cf69a4beff12c098a77de27d4f67f4
- SHA1 be9bd08bd9779348952c7cf003f4fe8787cb30bd
- SHA512 ff816c202b1f24b213cd8606329fb9a28baa540b76cd25b693087ccb230b80e5ad6a8da0e049e6d81f93129f5bbb82c3484c2bc152f582ad7a63dd04e2df3362
- SSDEEP 24576:jlf15h9eZkGI6EB0T5QBbe2up0WEWsVQEnolA0+6vuisqjnhMgeiCl7G0nehbGZd:jHQlo/msVLnolAvMZDmg27RnWGj
- TLSH T1F785DF10E783D135FDAB54F94ABE962E99387A31031690C7F3C01D9A5EB21E27B39247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_e0cf69a4beff12c098a77de27d4f67f4_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_e0cf69a4beff12c098a77de27d4f67f4_darkgate_elex_rhadamanthys_stop.exe
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_e0cf69a4beff12c098a77de27d4f67f4_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- SHA256 d2d57733bef41bb9170f2134f5c396f512a5e58fef081b702a7c9b8ac497fa91
- MD5 e0cf69a4beff12c098a77de27d4f67f4
- SHA1 be9bd08bd9779348952c7cf003f4fe8787cb30bd
- SHA512 ff816c202b1f24b213cd8606329fb9a28baa540b76cd25b693087ccb230b80e5ad6a8da0e049e6d81f93129f5bbb82c3484c2bc152f582ad7a63dd04e2df3362
- SSDEEP 24576:jlf15h9eZkGI6EB0T5QBbe2up0WEWsVQEnolA0+6vuisqjnhMgeiCl7G0nehbGZd:jHQlo/msVLnolAvMZDmg27RnWGj
- TLSH T1F785DF10E783D135FDAB54F94ABE962E99387A31031690C7F3C01D9A5EB21E27B39247
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1