General
- Target 2026-08-18_c91c75fe6149e836efe9deef262c99c1_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260818-b92dgst1ft
- SHA256 dda8f61156d1a302c985b1cd99f738254732ee63e27268314d607bd739857ab6
- MD5 c91c75fe6149e836efe9deef262c99c1
- SHA1 6e36af81bd86fd84cdbf84cfd67cc0f40b78884c
- SHA512 0da26efc73abef5a2a5dbc8f9fc8085ba4370473f0c7c9d338cc3de283607ce39b08a07eb750357a3cdc25d9c5589e86456a310d935581ebba90d47a16ca5ffa
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMR/CO/x9qqDLuBsL27aR:OAQsgScEyd/C1qnug2mR
- TLSH T126745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-18_c91c75fe6149e836efe9deef262c99c1_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_c91c75fe6149e836efe9deef262c99c1_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_c91c75fe6149e836efe9deef262c99c1_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 dda8f61156d1a302c985b1cd99f738254732ee63e27268314d607bd739857ab6
- MD5 c91c75fe6149e836efe9deef262c99c1
- SHA1 6e36af81bd86fd84cdbf84cfd67cc0f40b78884c
- SHA512 0da26efc73abef5a2a5dbc8f9fc8085ba4370473f0c7c9d338cc3de283607ce39b08a07eb750357a3cdc25d9c5589e86456a310d935581ebba90d47a16ca5ffa
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMR/CO/x9qqDLuBsL27aR:OAQsgScEyd/C1qnug2mR
- TLSH T126745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)