General
- Target 2026-08-12_48cb883520107541082009c39747eb70_darkgate_elex_gcleaner_hijackloader_wannacry
- Size 14.1MB
- Sample260812-krg2kazvht
- SHA256 16a3fa2f6dba104795464e8407aadcaa7cec01132ce102d2fc2c98756111932f
- MD5 48cb883520107541082009c39747eb70
- SHA1 bc4319ec4479d90741ceca92f7029916b8aefebd
- SHA512 e7ac780ce64ab13cf3d174210cf85faeed3795a9eade9bd02cf8fbbe937fa4f76a18217519928a1e0871ec362eb8b0861871081489f7ec01aaea52c84fd17f5d
- SSDEEP 393216:AMF/OiT86xvk7HiMPo7c7rd+ljUxrwn5UcmQMD1a:HrRxvoC/7a0jUxX7h1a
- TLSH T187E633527C88DBBFD4212770C6429B77529B7A74481018AB6F0C1CB66FB38CDE529B87
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_48cb883520107541082009c39747eb70_darkgate_elex_gcleaner_hijackloader_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_48cb883520107541082009c39747eb70_darkgate_elex_gcleaner_hijackloader_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_48cb883520107541082009c39747eb70_darkgate_elex_gcleaner_hijackloader_wannacry
- Size 14.1MB
- SHA256 16a3fa2f6dba104795464e8407aadcaa7cec01132ce102d2fc2c98756111932f
- MD5 48cb883520107541082009c39747eb70
- SHA1 bc4319ec4479d90741ceca92f7029916b8aefebd
- SHA512 e7ac780ce64ab13cf3d174210cf85faeed3795a9eade9bd02cf8fbbe937fa4f76a18217519928a1e0871ec362eb8b0861871081489f7ec01aaea52c84fd17f5d
- SSDEEP 393216:AMF/OiT86xvk7HiMPo7c7rd+ljUxrwn5UcmQMD1a:HrRxvoC/7a0jUxX7h1a
- TLSH T187E633527C88DBBFD4212770C6429B77529B7A74481018AB6F0C1CB66FB38CDE529B87
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.