General
- Target 2026-07-20_d18e85203bdc2db9ec8aa0409ae5c8f1_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- Sample260720-c1s67acx2r
- SHA256 b31efa078a7f50a4e9d453279c86cdf226a7c16713e494575aeb5601b76300e4
- MD5 d18e85203bdc2db9ec8aa0409ae5c8f1
- SHA1 10758f09b3c5968e9e33e18e2ff196c4bba70b2d
- SHA512 ea960866af72afcc4bc2cbc6bc58416d39c63c1aa3fd7a4df1c9df047ab972ac1b74d74c0952a2a7ea37e3a823bd9644fad6c4c0902265685668a7d0b8352823
- SSDEEP 49152:wNZCWOLT4/zGtbmhK2MtENeUY3/y3YIzB3:GwnLTEGt/qY3gYIF
- TLSH T160855B0667F95129F1F32B71EEB993645A77BC71AE3AC50E6280125E0DB0E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_d18e85203bdc2db9ec8aa0409ae5c8f1_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_d18e85203bdc2db9ec8aa0409ae5c8f1_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_d18e85203bdc2db9ec8aa0409ae5c8f1_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- SHA256 b31efa078a7f50a4e9d453279c86cdf226a7c16713e494575aeb5601b76300e4
- MD5 d18e85203bdc2db9ec8aa0409ae5c8f1
- SHA1 10758f09b3c5968e9e33e18e2ff196c4bba70b2d
- SHA512 ea960866af72afcc4bc2cbc6bc58416d39c63c1aa3fd7a4df1c9df047ab972ac1b74d74c0952a2a7ea37e3a823bd9644fad6c4c0902265685668a7d0b8352823
- SSDEEP 49152:wNZCWOLT4/zGtbmhK2MtENeUY3/y3YIzB3:GwnLTEGt/qY3gYIF
- TLSH T160855B0667F95129F1F32B71EEB993645A77BC71AE3AC50E6280125E0DB0E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1