General
- Target 2026-08-19_12926e82c41c1047d6974245ad2c448e_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260819-thnbnaxglb
- SHA256 acebc5882dd0c1bd7efaa7b3f7806c603252c9de530990f9c028925cc96884a9
- MD5 12926e82c41c1047d6974245ad2c448e
- SHA1 c7606e64804c575da79cd18ca2adf5da1268aab3
- SHA512 647a86c460fe2058bd9518c654c4d619036141e543eefb6ccc9548d9217df2f6c13dc29d06ceff070fb7a489d64fb2b3f7e83c1214655860bf0209a9ce8edfd1
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRkCO/x9qqDLuBsL27aR:OAQsgScEydkC1qnug2mR
- TLSH T135745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_12926e82c41c1047d6974245ad2c448e_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_12926e82c41c1047d6974245ad2c448e_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_12926e82c41c1047d6974245ad2c448e_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 acebc5882dd0c1bd7efaa7b3f7806c603252c9de530990f9c028925cc96884a9
- MD5 12926e82c41c1047d6974245ad2c448e
- SHA1 c7606e64804c575da79cd18ca2adf5da1268aab3
- SHA512 647a86c460fe2058bd9518c654c4d619036141e543eefb6ccc9548d9217df2f6c13dc29d06ceff070fb7a489d64fb2b3f7e83c1214655860bf0209a9ce8edfd1
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMRkCO/x9qqDLuBsL27aR:OAQsgScEydkC1qnug2mR
- TLSH T135745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)