General
- Target 2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260814-pxpe2stdkb
- SHA256 7a6ff82cfbbd7fdcc31ae76968bede0e90b5db6b6c4e68d06a367e4507d9b254
- MD5 b9f39a1b85ca52db5099c8fed26e2bc0
- SHA1 428d3258dc044f885a3ed2a8e44f2d244b3a6e56
- SHA512 cb4016625cf326170884acd6b6b3c6a58e7e480eb16fa61b5e2237e9d911856ab31c51766ebad1d33299474d41d5281058a40aae5f63c2d1622488d084785562
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMR0CO/x9qqDLuBsL27aR:OAQsgScEyd0C1qnug2mR
- TLSH T17B745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_b9f39a1b85ca52db5099c8fed26e2bc0_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 7a6ff82cfbbd7fdcc31ae76968bede0e90b5db6b6c4e68d06a367e4507d9b254
- MD5 b9f39a1b85ca52db5099c8fed26e2bc0
- SHA1 428d3258dc044f885a3ed2a8e44f2d244b3a6e56
- SHA512 cb4016625cf326170884acd6b6b3c6a58e7e480eb16fa61b5e2237e9d911856ab31c51766ebad1d33299474d41d5281058a40aae5f63c2d1622488d084785562
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMR0CO/x9qqDLuBsL27aR:OAQsgScEyd0C1qnug2mR
- TLSH T17B745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)