General
- Target 2026-07-01_909be5e079c9ea37cdff242ca470f996_darkgate_elex_gcleaner_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 2.3MB
- Sample260701-14zedagy6w
- SHA256 5eddd555b20f7f029b4bd4b3bc403129fa9174b336b4fb1714d88cea7c34a8fe
- MD5 909be5e079c9ea37cdff242ca470f996
- SHA1 b4183cd2a027616444bac22ddf51ecb7d059144d
- SHA512 13fda7c68543217a209d1a0602553ff20c6ee8d2ad088c5c7714f641c6f5c6dde04276f9ecd55a6ca245584460292c9b9a2cd0c8b792a8f2c8e63cbf20e83914
- SSDEEP 24576:epKcC/gWq65qk6vVH9h76vA/fB2SMYZfXlGc+QWcFZhTnibEy8:SKcCIz1AS5fXogFZAwy
- TLSH T1B9B54B33628312BFC12787394967D664DC3F7E202B55885A9EB4BD5C0E352C2AD3E64B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_909be5e079c9ea37cdff242ca470f996_darkgate_elex_gcleaner_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_909be5e079c9ea37cdff242ca470f996_darkgate_elex_gcleaner_rhadamanthys_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_909be5e079c9ea37cdff242ca470f996_darkgate_elex_gcleaner_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 2.3MB
- SHA256 5eddd555b20f7f029b4bd4b3bc403129fa9174b336b4fb1714d88cea7c34a8fe
- MD5 909be5e079c9ea37cdff242ca470f996
- SHA1 b4183cd2a027616444bac22ddf51ecb7d059144d
- SHA512 13fda7c68543217a209d1a0602553ff20c6ee8d2ad088c5c7714f641c6f5c6dde04276f9ecd55a6ca245584460292c9b9a2cd0c8b792a8f2c8e63cbf20e83914
- SSDEEP 24576:epKcC/gWq65qk6vVH9h76vA/fB2SMYZfXlGc+QWcFZhTnibEy8:SKcCIz1AS5fXogFZAwy
- TLSH T1B9B54B33628312BFC12787394967D664DC3F7E202B55885A9EB4BD5C0E352C2AD3E64B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.