General
- Target 2026-07-15_e0085868e5973bc243a2714ea711b4c1_darkgate_datper_elex_gcleaner_trigona
- Size 342KB
- Sample260716-bqqsmsdw4s
- SHA256 fa28ffd2123b641377351a480f4cd907ebef5c11a447637365d28f7121ed35d0
- MD5 e0085868e5973bc243a2714ea711b4c1
- SHA1 5f20407b0c67a90d4f3945b58d4fa91112634fd0
- SHA512 88425f01c863c0b2f244b39be04e9ac89f0d332010f3d83e2f8636c2bb42ddf287fd2cc91199cc91a2f4bb177320c43f4c7773e36c52f5712f60d03fff7fa5fd
- SSDEEP 6144:dx2QdiglMFGfzIBeZO8Wf2cMRuCO/xZqqDLuX+4pQoL27aR9:dAQsgScEyduCJqnuu4z2mR9
- TLSH T11D746A3E96814436E0710AF58B66931C603F7E2019F55C5E2DEB4AFCCD3B6536A38B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-15_e0085868e5973bc243a2714ea711b4c1_darkgate_datper_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_e0085868e5973bc243a2714ea711b4c1_darkgate_datper_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_e0085868e5973bc243a2714ea711b4c1_darkgate_datper_elex_gcleaner_trigona
- Size 342KB
- SHA256 fa28ffd2123b641377351a480f4cd907ebef5c11a447637365d28f7121ed35d0
- MD5 e0085868e5973bc243a2714ea711b4c1
- SHA1 5f20407b0c67a90d4f3945b58d4fa91112634fd0
- SHA512 88425f01c863c0b2f244b39be04e9ac89f0d332010f3d83e2f8636c2bb42ddf287fd2cc91199cc91a2f4bb177320c43f4c7773e36c52f5712f60d03fff7fa5fd
- SSDEEP 6144:dx2QdiglMFGfzIBeZO8Wf2cMRuCO/xZqqDLuX+4pQoL27aR9:dAQsgScEyduCJqnuu4z2mR9
- TLSH T11D746A3E96814436E0710AF58B66931C603F7E2019F55C5E2DEB4AFCCD3B6536A38B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)