General
- Target 2026-08-13_2cfaafdd217ff85c00d439ce340a9f56_darkgate_elex_karagany_manuscrypt_qakbot_redline-stealer_rhadamanthys_stop
- Size 653KB
- Sample260813-l6vrmsab35
- SHA256 dea49caafc88e24a92fdba4e51ec6680ef14767b6c8529cf83c8596c530176f0
- MD5 2cfaafdd217ff85c00d439ce340a9f56
- SHA1 a9a4fb9dddb5cbac0dcfec2861e54d106be150dd
- SHA512 9465e10a630a146ade128367179f9fdf78c1b0042e101b17c1f60c93d799602a44473810eabbb779031702ac974de60b4c9a7b4b36cd09beb8f6852cbef418fe
- SSDEEP 12288:OBITzyG065fA249fGsX8lr37rNg+3JiOL1ChS8GqC2I968AXDiHMD3:OoT55fVDlr37O+3Jx1C1I6XesD3
- TLSH T122E4130075E0CC72E2B45831EE74D5D15A7A76726BB1A0A37FA4317A2F5C5C00A72BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_2cfaafdd217ff85c00d439ce340a9f56_darkgate_elex_karagany_manuscrypt_qakbot_redline-stealer_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_2cfaafdd217ff85c00d439ce340a9f56_darkgate_elex_karagany_manuscrypt_qakbot_redline-stealer_rhadamanthys_stop
- Size 653KB
- SHA256 dea49caafc88e24a92fdba4e51ec6680ef14767b6c8529cf83c8596c530176f0
- MD5 2cfaafdd217ff85c00d439ce340a9f56
- SHA1 a9a4fb9dddb5cbac0dcfec2861e54d106be150dd
- SHA512 9465e10a630a146ade128367179f9fdf78c1b0042e101b17c1f60c93d799602a44473810eabbb779031702ac974de60b4c9a7b4b36cd09beb8f6852cbef418fe
- SSDEEP 12288:OBITzyG065fA249fGsX8lr37rNg+3JiOL1ChS8GqC2I968AXDiHMD3:OoT55fVDlr37O+3Jx1C1I6XesD3
- TLSH T122E4130075E0CC72E2B45831EE74D5D15A7A76726BB1A0A37FA4317A2F5C5C00A72BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL