General
- Target 2026-08-16_e2953e0e2c114225f9d35880a7100173_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260817-ap4sfagf58
- SHA256 a22ec67ebb528e97f0a50a3a12e569c89f77818ea90de002fc48055436f626d5
- MD5 e2953e0e2c114225f9d35880a7100173
- SHA1 03def9c241ecc75e1d14c2b8c514c559ac269b80
- SHA512 1dda32ef0839689b2058a0cbcb38ac75378ed10adf880b7fd8a6db28057d945bd12180ca465034ff6eb5d777f2142b6d31799e05d44918926f3d57f4b7be58a4
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRKCO/x9qqDLuBsL27aR:OAQsgScEydKC1qnug2mR
- TLSH T19F745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-16_e2953e0e2c114225f9d35880a7100173_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_e2953e0e2c114225f9d35880a7100173_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_e2953e0e2c114225f9d35880a7100173_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 a22ec67ebb528e97f0a50a3a12e569c89f77818ea90de002fc48055436f626d5
- MD5 e2953e0e2c114225f9d35880a7100173
- SHA1 03def9c241ecc75e1d14c2b8c514c559ac269b80
- SHA512 1dda32ef0839689b2058a0cbcb38ac75378ed10adf880b7fd8a6db28057d945bd12180ca465034ff6eb5d777f2142b6d31799e05d44918926f3d57f4b7be58a4
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRKCO/x9qqDLuBsL27aR:OAQsgScEydKC1qnug2mR
- TLSH T19F745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)