General
- Target 2026-08-14_857d456a0f75b49faeffbfa26b9438c7_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260814-ja2tzafj2w
- SHA256 a2a6f871b7430ccc01e1148c88fe28d1fb9b5dbf6b603f6e242130b4d8b14085
- MD5 857d456a0f75b49faeffbfa26b9438c7
- SHA1 dcac7e8824a8919ea0dfbe463d7cbe3142ae9b22
- SHA512 003ea1ae0c6ef7f0fb8579c5798b420b8cff37f16f0fc881e7b7d1ce46eddd6f479b78d13ba5cbd61d5549de3de19aebc8e57abd7ca3d32b2d7123aedc8862a5
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRtCO/x9qqDLuBsL27aR:OAQsgScEydtC1qnug2mR
- TLSH T18F745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-14_857d456a0f75b49faeffbfa26b9438c7_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_857d456a0f75b49faeffbfa26b9438c7_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_857d456a0f75b49faeffbfa26b9438c7_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 a2a6f871b7430ccc01e1148c88fe28d1fb9b5dbf6b603f6e242130b4d8b14085
- MD5 857d456a0f75b49faeffbfa26b9438c7
- SHA1 dcac7e8824a8919ea0dfbe463d7cbe3142ae9b22
- SHA512 003ea1ae0c6ef7f0fb8579c5798b420b8cff37f16f0fc881e7b7d1ce46eddd6f479b78d13ba5cbd61d5549de3de19aebc8e57abd7ca3d32b2d7123aedc8862a5
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRtCO/x9qqDLuBsL27aR:OAQsgScEydtC1qnug2mR
- TLSH T18F745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)