General
- Target 2026-08-15_ea56b92c5eaa20c70ea59f7eb6c1d5a8_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260815-mgk2kstglc
- SHA256 b36da07824035494cc87e95e014dfcc6c2fbf1b16304ccd98db1cc6204450ac4
- MD5 ea56b92c5eaa20c70ea59f7eb6c1d5a8
- SHA1 52b071fe2657c1ede32e0623eed4f3f7c2cb5923
- SHA512 f882ba14a769f8f0d0cc02ca2070f3d81b597edab8e327f27fe553a39bdb261e4d1c67bfc14b5f1a16764c1e01657c8db9b0fc8df0b8aa034391987cfafd2a93
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRjCO/x9qqDLuBsL27aR:OAQsgScEydjC1qnug2mR
- TLSH T117745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-15_ea56b92c5eaa20c70ea59f7eb6c1d5a8_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_ea56b92c5eaa20c70ea59f7eb6c1d5a8_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_ea56b92c5eaa20c70ea59f7eb6c1d5a8_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 b36da07824035494cc87e95e014dfcc6c2fbf1b16304ccd98db1cc6204450ac4
- MD5 ea56b92c5eaa20c70ea59f7eb6c1d5a8
- SHA1 52b071fe2657c1ede32e0623eed4f3f7c2cb5923
- SHA512 f882ba14a769f8f0d0cc02ca2070f3d81b597edab8e327f27fe553a39bdb261e4d1c67bfc14b5f1a16764c1e01657c8db9b0fc8df0b8aa034391987cfafd2a93
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRjCO/x9qqDLuBsL27aR:OAQsgScEydjC1qnug2mR
- TLSH T117745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)