General
- Target 2026-08-14_6513b9b7b6f6768888306e5853ba83a6_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260814-qs3mjsaa99
- SHA256 f2fac080cfe0cc7d7c336834cc0c056665ced98f6a808f68913aab0d8dffdb87
- MD5 6513b9b7b6f6768888306e5853ba83a6
- SHA1 0a001a0c9f4dd0df1f323ff672c0b526b82832d9
- SHA512 f6d024f8a65d4e0419bbfc1b1da221f346128640d6a46d0d5ee974ed9d12e6f70679f66b18f2aaa906e473d36d2b759d56bac6e1e1135fbc4ca65af8d19f58c9
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRfCO/x9qqDLuBsL27aR:OAQsgScEydfC1qnug2mR
- TLSH T191745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-14_6513b9b7b6f6768888306e5853ba83a6_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_6513b9b7b6f6768888306e5853ba83a6_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_6513b9b7b6f6768888306e5853ba83a6_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 f2fac080cfe0cc7d7c336834cc0c056665ced98f6a808f68913aab0d8dffdb87
- MD5 6513b9b7b6f6768888306e5853ba83a6
- SHA1 0a001a0c9f4dd0df1f323ff672c0b526b82832d9
- SHA512 f6d024f8a65d4e0419bbfc1b1da221f346128640d6a46d0d5ee974ed9d12e6f70679f66b18f2aaa906e473d36d2b759d56bac6e1e1135fbc4ca65af8d19f58c9
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRfCO/x9qqDLuBsL27aR:OAQsgScEydfC1qnug2mR
- TLSH T191745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)