General
- Target 2026-07-20_4763135ec43e59a745991df73e120ba8_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- Sample260720-drah6agt3z
- SHA256 bbc5fa1eceb97bff20fb5cedbc9e41270d37132d1b0eb2f99b84744127ac7b26
- MD5 4763135ec43e59a745991df73e120ba8
- SHA1 ba39c1a9a3c70ea0ca4b11da32ef02b24bb36dc5
- SHA512 915054183499ca3a27c863f014d8ac410dd73ad30524db0acd6fc919df117235d99fd684b4bf838d715a1b7c621fb07ed7662f16d666fcf90e75ba6565e26129
- SSDEEP 24576:wbdrZe4aWOLT4/zG5eumcK2MtENoxWLEkgXWHiYKbfZB1v3adCMW:wNZCWOLT4/zG5xmcK2MtENlcfT1S1
- TLSH T14F856B0667F95128F1F37B71EEB992645A77BC71AE3AC50E6280025E0DB4E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_4763135ec43e59a745991df73e120ba8_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_4763135ec43e59a745991df73e120ba8_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_4763135ec43e59a745991df73e120ba8_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- SHA256 bbc5fa1eceb97bff20fb5cedbc9e41270d37132d1b0eb2f99b84744127ac7b26
- MD5 4763135ec43e59a745991df73e120ba8
- SHA1 ba39c1a9a3c70ea0ca4b11da32ef02b24bb36dc5
- SHA512 915054183499ca3a27c863f014d8ac410dd73ad30524db0acd6fc919df117235d99fd684b4bf838d715a1b7c621fb07ed7662f16d666fcf90e75ba6565e26129
- SSDEEP 24576:wbdrZe4aWOLT4/zG5eumcK2MtENoxWLEkgXWHiYKbfZB1v3adCMW:wNZCWOLT4/zG5xmcK2MtENlcfT1S1
- TLSH T14F856B0667F95128F1F37B71EEB992645A77BC71AE3AC50E6280025E0DB4E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1