General
- Target 2026-08-15_72f07f01862e977b052f353090443b24_darkgate_elex_gcleaner_reveton
- Size 1.4MB
- Sample260815-jeej8s1hpf
- SHA256 7b483d05c4e685f00703cbeae12724c113015d451109a6113e23415967eab7ba
- MD5 72f07f01862e977b052f353090443b24
- SHA1 cbaf849073b20cfdb902d07c01b24646b9ca83d3
- SHA512 af8c395caef87f0d7addfe629de0a5cbe70e027185d21a84dfd062433d5e291b9a4e9717e9ac2f3980c67a7b8d148d93128da2fe30812414a84c9ef25eb24482
- SSDEEP 12288:FCwL/z4W4sBHGMEZ7D+ecSwKsanj0IjabV4XiY2tJxD7lH1SctyJF+7/05Xgyi:F3zXSDxb9IHV4X8JxD11SctyJw7/0BRi
- TLSH T123658D01B399A422C167063CDC6BD6FD5B2BFF80AD26598B3AA43F4DAF347507520693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-15_72f07f01862e977b052f353090443b24_darkgate_elex_gcleaner_reveton.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_72f07f01862e977b052f353090443b24_darkgate_elex_gcleaner_reveton.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_72f07f01862e977b052f353090443b24_darkgate_elex_gcleaner_reveton
- Size 1.4MB
- SHA256 7b483d05c4e685f00703cbeae12724c113015d451109a6113e23415967eab7ba
- MD5 72f07f01862e977b052f353090443b24
- SHA1 cbaf849073b20cfdb902d07c01b24646b9ca83d3
- SHA512 af8c395caef87f0d7addfe629de0a5cbe70e027185d21a84dfd062433d5e291b9a4e9717e9ac2f3980c67a7b8d148d93128da2fe30812414a84c9ef25eb24482
- SSDEEP 12288:FCwL/z4W4sBHGMEZ7D+ecSwKsanj0IjabV4XiY2tJxD7lH1SctyJF+7/05Xgyi:F3zXSDxb9IHV4X8JxD11SctyJw7/0BRi
- TLSH T123658D01B399A422C167063CDC6BD6FD5B2BFF80AD26598B3AA43F4DAF347507520693
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage