General
- Target 2026-07-18_460df5d45c9e72d597135b6e01bc4cf9_darkgate_elex_remcos_rhadamanthys_stop
- Size 19.4MB
- Sample260718-j3ej5sdv2q
- SHA256 449ef648687eba065b6be467f6c4bfe9c245f8af7664c85a9b69d851ed82e4d6
- MD5 460df5d45c9e72d597135b6e01bc4cf9
- SHA1 8c0fd5586b00af734ce726d7a0909c3834f48ac4
- SHA512 0bdb0974eee227f98c77b73cd97aab0040d7c3db6089cdb4c314c5ce4e0d1c921168efe1f85d856f3c99c1ff37ababb34e15e5fe7d7908307f729e4b4d1b22b6
- SSDEEP 393216:UZIzDiD5lG/WcP+xXgezcb6VCNy8+JD/WEoLqgNKUBGiM:MfaWi+6e4+CuAfM
- TLSH T1C8272302B7E5803AE2B70A709A7A57B556B5BCA25E32C14F73CC7A0C6F305C19936B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_460df5d45c9e72d597135b6e01bc4cf9_darkgate_elex_remcos_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_460df5d45c9e72d597135b6e01bc4cf9_darkgate_elex_remcos_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_460df5d45c9e72d597135b6e01bc4cf9_darkgate_elex_remcos_rhadamanthys_stop
- Size 19.4MB
- SHA256 449ef648687eba065b6be467f6c4bfe9c245f8af7664c85a9b69d851ed82e4d6
- MD5 460df5d45c9e72d597135b6e01bc4cf9
- SHA1 8c0fd5586b00af734ce726d7a0909c3834f48ac4
- SHA512 0bdb0974eee227f98c77b73cd97aab0040d7c3db6089cdb4c314c5ce4e0d1c921168efe1f85d856f3c99c1ff37ababb34e15e5fe7d7908307f729e4b4d1b22b6
- SSDEEP 393216:UZIzDiD5lG/WcP+xXgezcb6VCNy8+JD/WEoLqgNKUBGiM:MfaWi+6e4+CuAfM
- TLSH T1C8272302B7E5803AE2B70A709A7A57B556B5BCA25E32C14F73CC7A0C6F305C19936B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.