General
- Target 2026-08-08_8049d4ff138f1f1fc74cf71d9ee9aa17_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- Sample260808-dsy8xagp81
- SHA256 8485cf3cd62d5de195eb6c7f06be697d414dcc4048f7b5fabac521efce62e0da
- MD5 8049d4ff138f1f1fc74cf71d9ee9aa17
- SHA1 3a2e2ca8a06702b1e7ae4dbf240b5ea7d8645e94
- SHA512 77b16639c6b5ff5057f50b93180d0265b8a639320617d926e0b565603339b223ad06018fe7cbeacb15f3cde0342f396480634037be31ed7cded26511c32b813c
- SSDEEP 49152:wNZCWOLT4fcGHUmzK2MtENW07Jckdwi3N7+WTW3:GwnLT/GHaPSPdwi3Q
- TLSH T115856B0667F94129F1F37B71EEB992645A77BC71AE3AC50E5280125E0CB4E50DA32B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_8049d4ff138f1f1fc74cf71d9ee9aa17_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_8049d4ff138f1f1fc74cf71d9ee9aa17_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_8049d4ff138f1f1fc74cf71d9ee9aa17_darkgate_elex_rhadamanthys_stop
- Size 1.7MB
- SHA256 8485cf3cd62d5de195eb6c7f06be697d414dcc4048f7b5fabac521efce62e0da
- MD5 8049d4ff138f1f1fc74cf71d9ee9aa17
- SHA1 3a2e2ca8a06702b1e7ae4dbf240b5ea7d8645e94
- SHA512 77b16639c6b5ff5057f50b93180d0265b8a639320617d926e0b565603339b223ad06018fe7cbeacb15f3cde0342f396480634037be31ed7cded26511c32b813c
- SSDEEP 49152:wNZCWOLT4fcGHUmzK2MtENW07Jckdwi3N7+WTW3:GwnLT/GHaPSPdwi3Q
- TLSH T115856B0667F94129F1F37B71EEB992645A77BC71AE3AC50E5280125E0CB4E50DA32B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1