General
- Target 2026-07-31_dc52d9e9c09349299aee5899c4588214_darkgate_elex_rhadamanthys_stop
- Size 1.8MB
- Sample260731-cymxds1hrh
- SHA256 a66e44122f03e15b67521bc0c3b79c6d10250e3d717a4b477f732ff9c51fcaf3
- MD5 dc52d9e9c09349299aee5899c4588214
- SHA1 bee4e4428eb6e34693b8d8857b781a8f6658ebf8
- SHA512 e38c4b855e73dd105c3a64a4d8945a735bb8d1ac70521e19684d4af2c18b1113e7a6d2dc004f1182a1e2a9d79b9c820f201f4bcd57ae67ff0e03efb1fc380017
- SSDEEP 24576:JbdrZe4aWOLT4+eGsg+myK2MtEN2zRTTxH2qjYXzGAiGFn4w7z:JNZCWOLT4+eGsfmyK2MtENmFYXLFj
- TLSH T18B855B0667F95128F1F37B71EEB992645A77BC71AD3AC50E6280025E0DB4E90DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_dc52d9e9c09349299aee5899c4588214_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_dc52d9e9c09349299aee5899c4588214_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260710-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_dc52d9e9c09349299aee5899c4588214_darkgate_elex_rhadamanthys_stop
- Size 1.8MB
- SHA256 a66e44122f03e15b67521bc0c3b79c6d10250e3d717a4b477f732ff9c51fcaf3
- MD5 dc52d9e9c09349299aee5899c4588214
- SHA1 bee4e4428eb6e34693b8d8857b781a8f6658ebf8
- SHA512 e38c4b855e73dd105c3a64a4d8945a735bb8d1ac70521e19684d4af2c18b1113e7a6d2dc004f1182a1e2a9d79b9c820f201f4bcd57ae67ff0e03efb1fc380017
- SSDEEP 24576:JbdrZe4aWOLT4+eGsg+myK2MtEN2zRTTxH2qjYXzGAiGFn4w7z:JNZCWOLT4+eGsfmyK2MtENmFYXLFj
- TLSH T18B855B0667F95128F1F37B71EEB992645A77BC71AD3AC50E6280025E0DB4E90DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Executes dropped EXE
Checks whether UAC is enabled
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1