General
- Target 2026-07-02_53548b829d30bec32dd7513c85a32708_darkgate_elex_gcleaner_stop
- Size 1.7MB
- Sample260702-2skbracy5p
- SHA256 2aeec9a2c42c782410ba857417a048ed64db195468526712cd828d1f65d5ff4a
- MD5 53548b829d30bec32dd7513c85a32708
- SHA1 87b5a02ce52ddc2e69f451f8152228a2ec833b84
- SHA512 8d949ffd676aeaa876fe864132333963d0f1207a3f989c2b9e84755e9be6ea7d9c575a1516d651479d91b540ec45e1e34c4cf6999114d97eee81f76d3fd4e612
- SSDEEP 24576:zXPcWuqWq65qk6vVH9h76vA/fB2SMYZfXlGc+QWcFZhTnibEyd:rPcWHz1AS5fXogFZAwy
- TLSH T13C855C33B28312BFC12787394967D654DC3F7E202B15885A9AF4BD5C0E356C2AD2E64B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_53548b829d30bec32dd7513c85a32708_darkgate_elex_gcleaner_stop.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_53548b829d30bec32dd7513c85a32708_darkgate_elex_gcleaner_stop.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_53548b829d30bec32dd7513c85a32708_darkgate_elex_gcleaner_stop
- Size 1.7MB
- SHA256 2aeec9a2c42c782410ba857417a048ed64db195468526712cd828d1f65d5ff4a
- MD5 53548b829d30bec32dd7513c85a32708
- SHA1 87b5a02ce52ddc2e69f451f8152228a2ec833b84
- SHA512 8d949ffd676aeaa876fe864132333963d0f1207a3f989c2b9e84755e9be6ea7d9c575a1516d651479d91b540ec45e1e34c4cf6999114d97eee81f76d3fd4e612
- SSDEEP 24576:zXPcWuqWq65qk6vVH9h76vA/fB2SMYZfXlGc+QWcFZhTnibEyd:rPcWHz1AS5fXogFZAwy
- TLSH T13C855C33B28312BFC12787394967D654DC3F7E202B15885A9AF4BD5C0E356C2AD2E64B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.