General
- Target 2026-07-16_4f864cfa381ba840d2e74f80146fea1c_darkgate_elex_rhadamanthys_stop
- Size 10.7MB
- Sample260716-nzwfpscs2k
- SHA256 92b2ca4e8b49abe88b250b1bb4d7abb2d7da2805ed62d968b1756aa58f4865f5
- MD5 4f864cfa381ba840d2e74f80146fea1c
- SHA1 330e0e455bfdcf2317bea47710e08f1b0ee4287d
- SHA512 13cb8aa5a6b947ba551df7b53c172f933562e2fd0d2a7ab6048c34c4ba796a11386ebcccf758a33ef5d71da0cf51e5879e4fa49a3068a580f277c41831615103
- SSDEEP 24576:ohzZgUEYO7aANd4dojKzqSI8CEsH7YoG8nQ/tbw/2Mkjy6Fr7g0os:igsUad8KueHsHxG8Q/lFTjN4
- TLSH T15CB6164075EF9320F1AFDA3398B9EE504A79BE152635A1CF91B138F90B712504DA873E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_4f864cfa381ba840d2e74f80146fea1c_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_4f864cfa381ba840d2e74f80146fea1c_darkgate_elex_rhadamanthys_stop
- Size 10.7MB
- SHA256 92b2ca4e8b49abe88b250b1bb4d7abb2d7da2805ed62d968b1756aa58f4865f5
- MD5 4f864cfa381ba840d2e74f80146fea1c
- SHA1 330e0e455bfdcf2317bea47710e08f1b0ee4287d
- SHA512 13cb8aa5a6b947ba551df7b53c172f933562e2fd0d2a7ab6048c34c4ba796a11386ebcccf758a33ef5d71da0cf51e5879e4fa49a3068a580f277c41831615103
- SSDEEP 24576:ohzZgUEYO7aANd4dojKzqSI8CEsH7YoG8nQ/tbw/2Mkjy6Fr7g0os:igsUad8KueHsHxG8Q/lFTjN4
- TLSH T15CB6164075EF9320F1AFDA3398B9EE504A79BE152635A1CF91B138F90B712504DA873E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1