General
- Target 2026-07-17_5403bcf42f2b0bb0af3b39f32a839148_darkgate_elex_gcleaner_trigona
- Size 359KB
- Sample260717-ftacaabt9r
- SHA256 f57e822c3236416abb6999c25d48184337df3ff6a3c349a4781b98c3f8361451
- MD5 5403bcf42f2b0bb0af3b39f32a839148
- SHA1 fe83424bd0790c340565d2d59d82fc1f973d0da3
- SHA512 b8c75445171ba069cbc626f7fbe8ed6c34d21e2484e3ea852a334aef07b514ce0815ad00b8912f3577bdabf92b3815baa5a50ed3b31874b3aa6cce5dd952ab6b
- SSDEEP 6144:wx2QdiglMFGfzIBeZO8Wf2cMRRCO/x9qqDLuB3L27a7KW:wAQsgScEydRC1qnuZ2m7KW
- TLSH T13E745A3EA685443AF0710AF08B65831C503F7E2419F55C5E2DDB4AF8DD3B6522E3AB92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-17_5403bcf42f2b0bb0af3b39f32a839148_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_5403bcf42f2b0bb0af3b39f32a839148_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_5403bcf42f2b0bb0af3b39f32a839148_darkgate_elex_gcleaner_trigona
- Size 359KB
- SHA256 f57e822c3236416abb6999c25d48184337df3ff6a3c349a4781b98c3f8361451
- MD5 5403bcf42f2b0bb0af3b39f32a839148
- SHA1 fe83424bd0790c340565d2d59d82fc1f973d0da3
- SHA512 b8c75445171ba069cbc626f7fbe8ed6c34d21e2484e3ea852a334aef07b514ce0815ad00b8912f3577bdabf92b3815baa5a50ed3b31874b3aa6cce5dd952ab6b
- SSDEEP 6144:wx2QdiglMFGfzIBeZO8Wf2cMRRCO/x9qqDLuB3L27a7KW:wAQsgScEydRC1qnuZ2m7KW
- TLSH T13E745A3EA685443AF0710AF08B65831C503F7E2419F55C5E2DDB4AF8DD3B6522E3AB92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)