General
- Target 2026-08-30_d40cae9329caa7425884f66db6d40197_darkgate_elex_stealc_stop_swisyn
- Size 397KB
- Sample260831-d97xdawyht
- SHA256 823911dc068fd0ffe0784fd06a6dc2431ab99b9f27489e3b82eeaaa7904e519d
- MD5 d40cae9329caa7425884f66db6d40197
- SHA1 31475b2707e73aa22c6902e8534d262c4f507b02
- SHA512 b2bce4c0d5aee7da4407d2e425e569731263bc4d8f7d7ac06568b5e6c2850a5872138624f53287fd58b405d2f1a3150df6c50d3e62f31c2ef5f9a480b72b333d
- SSDEEP 6144:UsLqdufVUNDaDQe5WWU6rNJH6HnnnN9OrB8LWRLIn84Jv8Qba+9:PFUNDau9HnnnN968TDJ/H
- TLSH T17D849D227A90C43BC46255B21855DB797A7A7D320F205E8B77D16B7CAE31383B9B430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_d40cae9329caa7425884f66db6d40197_darkgate_elex_stealc_stop_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_d40cae9329caa7425884f66db6d40197_darkgate_elex_stealc_stop_swisyn.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_d40cae9329caa7425884f66db6d40197_darkgate_elex_stealc_stop_swisyn
- Size 397KB
- SHA256 823911dc068fd0ffe0784fd06a6dc2431ab99b9f27489e3b82eeaaa7904e519d
- MD5 d40cae9329caa7425884f66db6d40197
- SHA1 31475b2707e73aa22c6902e8534d262c4f507b02
- SHA512 b2bce4c0d5aee7da4407d2e425e569731263bc4d8f7d7ac06568b5e6c2850a5872138624f53287fd58b405d2f1a3150df6c50d3e62f31c2ef5f9a480b72b333d
- SSDEEP 6144:UsLqdufVUNDaDQe5WWU6rNJH6HnnnN9OrB8LWRLIn84Jv8Qba+9:PFUNDau9HnnnN968TDJ/H
- TLSH T17D849D227A90C43BC46255B21855DB797A7A7D320F205E8B77D16B7CAE31383B9B430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory