General
- Target 2026-08-13_8fa47913089d7c44aad54414c9f906a6_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260813-kql9wsvhra
- SHA256 bd18220e7938412b2d7eaf2c05b7d5f49fd7f3e4017057c82e8c4a2d9a0c3cf1
- MD5 8fa47913089d7c44aad54414c9f906a6
- SHA1 b10ae7fe3ea34801224098b6f241cf5737f00290
- SHA512 35a64e17c34dd282164bd7c85ab2871a15ee6c4277b4144363ee3e605277cdad0c490a874c713ec76164a13b3c632aa5e76e284ac383ded7073b1cfca5cf1ddc
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRcCO/x9qqDLuBsL27aR:OAQsgScEydcC1qnug2mR
- TLSH T114745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-13_8fa47913089d7c44aad54414c9f906a6_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_8fa47913089d7c44aad54414c9f906a6_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_8fa47913089d7c44aad54414c9f906a6_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 bd18220e7938412b2d7eaf2c05b7d5f49fd7f3e4017057c82e8c4a2d9a0c3cf1
- MD5 8fa47913089d7c44aad54414c9f906a6
- SHA1 b10ae7fe3ea34801224098b6f241cf5737f00290
- SHA512 35a64e17c34dd282164bd7c85ab2871a15ee6c4277b4144363ee3e605277cdad0c490a874c713ec76164a13b3c632aa5e76e284ac383ded7073b1cfca5cf1ddc
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRcCO/x9qqDLuBsL27aR:OAQsgScEydcC1qnug2mR
- TLSH T114745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)