General
- Target 2026-08-02_309ecc0bab04f59f9c879009e547a6a7_darkgate_elex_gcleaner_helldown_poet-rat
- Size 6.5MB
- Sample260802-dwwl7asvbx
- SHA256 18811c4f4c38f9459439de2ac7500914f7f986231db682217a0ff3878755b344
- MD5 309ecc0bab04f59f9c879009e547a6a7
- SHA1 1820aafa31aa83e6eed428a09650e2669c048665
- SHA512 101e6af66511f4af58d31a540006f45b473dd6c4f8a6f36c68778294165aaade58f6ef85a1189b2078ac89f1f75f7e9111dce149c26621f11596e8269a0484ca
- SSDEEP 98304:/wTgG7J+Mfr7Wxriwr9JQ3ozWMtQOC4t4:/wTg1Qr7WO37MLC4t4
- TLSH T1B5662231E251D837C1A306B48DE2C735816E9E7C2B1391C767F92C8BB9265DA7F20693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_309ecc0bab04f59f9c879009e547a6a7_darkgate_elex_gcleaner_helldown_poet-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_309ecc0bab04f59f9c879009e547a6a7_darkgate_elex_gcleaner_helldown_poet-rat.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_309ecc0bab04f59f9c879009e547a6a7_darkgate_elex_gcleaner_helldown_poet-rat
- Size 6.5MB
- SHA256 18811c4f4c38f9459439de2ac7500914f7f986231db682217a0ff3878755b344
- MD5 309ecc0bab04f59f9c879009e547a6a7
- SHA1 1820aafa31aa83e6eed428a09650e2669c048665
- SHA512 101e6af66511f4af58d31a540006f45b473dd6c4f8a6f36c68778294165aaade58f6ef85a1189b2078ac89f1f75f7e9111dce149c26621f11596e8269a0484ca
- SSDEEP 98304:/wTgG7J+Mfr7Wxriwr9JQ3ozWMtQOC4t4:/wTg1Qr7WO37MLC4t4
- TLSH T1B5662231E251D837C1A306B48DE2C735816E9E7C2B1391C767F92C8BB9265DA7F20693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Enigma
-
Detects packed executables observed in Molerats
-
Loads dropped DLL