General
- Target 2026-08-06_8b666f1b513b91afbedc223dd92686dc_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- Sample260806-bs5dtawsgt
- SHA256 3281ff66684c6a5ce2ff36ce3e249386a8233f46d4dc1ee8309d7b3c56568a24
- MD5 8b666f1b513b91afbedc223dd92686dc
- SHA1 7e0e65f767453f6eb9d5dbfe204f6fa4a943d482
- SHA512 7c5ebfdc1fa8f2ca9a5888fef4b58d5bbc0622124726f038ff819c6d986d630df315dac0a0e67f9c496dae4bbbde13b7031e2cd5a7d95aacb487972c77a4104c
- SSDEEP 49152:CNZCWOLT4DnG+fm8K2MtENO4JNduVY8dr:QwnLTAG+YT4Buxdr
- TLSH T1E9855A0663E94129F1F33B71EEB993645A77BC71AE3AC50E6280125E0DB4E50DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_8b666f1b513b91afbedc223dd92686dc_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_8b666f1b513b91afbedc223dd92686dc_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_8b666f1b513b91afbedc223dd92686dc_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- SHA256 3281ff66684c6a5ce2ff36ce3e249386a8233f46d4dc1ee8309d7b3c56568a24
- MD5 8b666f1b513b91afbedc223dd92686dc
- SHA1 7e0e65f767453f6eb9d5dbfe204f6fa4a943d482
- SHA512 7c5ebfdc1fa8f2ca9a5888fef4b58d5bbc0622124726f038ff819c6d986d630df315dac0a0e67f9c496dae4bbbde13b7031e2cd5a7d95aacb487972c77a4104c
- SSDEEP 49152:CNZCWOLT4DnG+fm8K2MtENO4JNduVY8dr:QwnLTAG+YT4Buxdr
- TLSH T1E9855A0663E94129F1F33B71EEB993645A77BC71AE3AC50E6280125E0DB4E50DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1