General
- Target 2026-08-19_33af3a85cd691b23e6b8cb5734d3e42d_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260819-q19e3afd63
- SHA256 acc230345fde2eb4ded935d39e47cc800bce501faadddadb9cf700c125fe4d5e
- MD5 33af3a85cd691b23e6b8cb5734d3e42d
- SHA1 7d7d2e9fa041cccf4a3984699595f4b89f49cf9d
- SHA512 afe89dc69e7d89c1b790d35e6400b2079cdcaf7620d6a824e2b2f4c0d043ba2b10436dcdc028ecc0243543226caed8a0b06e535f04d09c2d291a9e545bc66003
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRdCO/x9qqDLuBsL27aR:OAQsgScEyddC1qnug2mR
- TLSH T182745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_33af3a85cd691b23e6b8cb5734d3e42d_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_33af3a85cd691b23e6b8cb5734d3e42d_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_33af3a85cd691b23e6b8cb5734d3e42d_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 acc230345fde2eb4ded935d39e47cc800bce501faadddadb9cf700c125fe4d5e
- MD5 33af3a85cd691b23e6b8cb5734d3e42d
- SHA1 7d7d2e9fa041cccf4a3984699595f4b89f49cf9d
- SHA512 afe89dc69e7d89c1b790d35e6400b2079cdcaf7620d6a824e2b2f4c0d043ba2b10436dcdc028ecc0243543226caed8a0b06e535f04d09c2d291a9e545bc66003
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRdCO/x9qqDLuBsL27aR:OAQsgScEyddC1qnug2mR
- TLSH T182745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)