General
- Target 2026-08-16_0d8663cf6686a9cac2c4bbdc8ae0f5b2_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260817-bdql4scq9s
- SHA256 399584c6c299cc0d50b2b8e4359f641b97c37f95d8e5b3a4eb5ed2dc0abbd2fa
- MD5 0d8663cf6686a9cac2c4bbdc8ae0f5b2
- SHA1 4694d740c08b4e9c1cadeda1700ff68535e61dea
- SHA512 33c36814f151cd081c9bfdd814efddfdc548190936e9917e7460b4ae840c6c9bdcb31ce00b37e564833689114f3ac900a28c256b18600150611d7b242b5fd80b
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMReCO/x9qqDLuBsL27aR:OAQsgScEydeC1qnug2mR
- TLSH T1AC745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-16_0d8663cf6686a9cac2c4bbdc8ae0f5b2_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_0d8663cf6686a9cac2c4bbdc8ae0f5b2_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_0d8663cf6686a9cac2c4bbdc8ae0f5b2_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 399584c6c299cc0d50b2b8e4359f641b97c37f95d8e5b3a4eb5ed2dc0abbd2fa
- MD5 0d8663cf6686a9cac2c4bbdc8ae0f5b2
- SHA1 4694d740c08b4e9c1cadeda1700ff68535e61dea
- SHA512 33c36814f151cd081c9bfdd814efddfdc548190936e9917e7460b4ae840c6c9bdcb31ce00b37e564833689114f3ac900a28c256b18600150611d7b242b5fd80b
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMReCO/x9qqDLuBsL27aR:OAQsgScEydeC1qnug2mR
- TLSH T1AC745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)