General
- Target 2026-07-05_62bb339409e5120dc9f48a16d59c3093_darkgate_elex_gcleaner_glassworm_helldown_trigona
- Size 5.1MB
- Sample260705-by4dpsf19z
- SHA256 bb2fe141caf8c03a8312823a14e9b3894fcabef22767c9cb76658ee315894f07
- MD5 62bb339409e5120dc9f48a16d59c3093
- SHA1 94c36ff487197a54c0132ad5359fcec5e8c96867
- SHA512 90b50691212036ad34517ff76b14ea6ecb9e87ecc56c8cf32dd24a9456fa20d64b1f0fbab1b8f10f53c744e9099e54faeb0e05817001e1234646734f83da907e
- SSDEEP 98304:0G9Cx9ECTI/UXYXxERkoYckxrWN3Wl3331G1ze807:Z9CxbTI/RXGRyG7m
- TLSH T1E8467D13F384613FD15B1A36483BA354583BBA612E26CD675BE8384C4E396923F3A747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_62bb339409e5120dc9f48a16d59c3093_darkgate_elex_gcleaner_glassworm_helldown_trigona.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_62bb339409e5120dc9f48a16d59c3093_darkgate_elex_gcleaner_glassworm_helldown_trigona.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_62bb339409e5120dc9f48a16d59c3093_darkgate_elex_gcleaner_glassworm_helldown_trigona
- Size 5.1MB
- SHA256 bb2fe141caf8c03a8312823a14e9b3894fcabef22767c9cb76658ee315894f07
- MD5 62bb339409e5120dc9f48a16d59c3093
- SHA1 94c36ff487197a54c0132ad5359fcec5e8c96867
- SHA512 90b50691212036ad34517ff76b14ea6ecb9e87ecc56c8cf32dd24a9456fa20d64b1f0fbab1b8f10f53c744e9099e54faeb0e05817001e1234646734f83da907e
- SSDEEP 98304:0G9Cx9ECTI/UXYXxERkoYckxrWN3Wl3331G1ze807:Z9CxbTI/RXGRyG7m
- TLSH T1E8467D13F384613FD15B1A36483BA354583BBA612E26CD675BE8384C4E396923F3A747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.