General
- Target 2026-07-20_f0a5f47907f20cf7515bf697eeea0808_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- Sample260720-cv5b9se18z
- SHA256 daa7bb02238161dbde73f60b99f88734e786b790ab02ce91e5530a88c72163d6
- MD5 f0a5f47907f20cf7515bf697eeea0808
- SHA1 bfec7ec2617f7736715eecadc0a57e156348b36c
- SHA512 87813abcdd546975e99ad64cedfaf8054b9c8d501f38d81b5a8a6b61ac145947465e701b078b84042cadad0c2ea930f5029a68d588ee2ba3f7ef139fd24aad1a
- SSDEEP 49152:wNZCWOLT4/zGrXmvK2MtEN/7Jckdwi3N7+WTW3:GwnLTEGrZSPdwi3Q
- TLSH T19E856B0667F94129F1F37B71EEB992645A77BC71AE3AC50E5280125E0CB4E90DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_f0a5f47907f20cf7515bf697eeea0808_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_f0a5f47907f20cf7515bf697eeea0808_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_f0a5f47907f20cf7515bf697eeea0808_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- SHA256 daa7bb02238161dbde73f60b99f88734e786b790ab02ce91e5530a88c72163d6
- MD5 f0a5f47907f20cf7515bf697eeea0808
- SHA1 bfec7ec2617f7736715eecadc0a57e156348b36c
- SHA512 87813abcdd546975e99ad64cedfaf8054b9c8d501f38d81b5a8a6b61ac145947465e701b078b84042cadad0c2ea930f5029a68d588ee2ba3f7ef139fd24aad1a
- SSDEEP 49152:wNZCWOLT4/zGrXmvK2MtEN/7Jckdwi3N7+WTW3:GwnLTEGrZSPdwi3Q
- TLSH T19E856B0667F94129F1F37B71EEB992645A77BC71AE3AC50E5280125E0CB4E90DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1