General
- Target 2026-08-31_72ed1b3cc4d02b0c9a8b3032ae694d03_darkgate_elex_gcleaner_trigona
- Size 342KB
- Sample260831-w8dw1sem2s
- SHA256 7975972f5951ed321887d00c45aaa225f789666dae806940e63a66c3679b0f6b
- MD5 72ed1b3cc4d02b0c9a8b3032ae694d03
- SHA1 7aba747a41b04c0ed2acaa41354f07b43ec44dc0
- SHA512 ec686240173e6eedd578ef2f8470ccf6e23009e498ef9c30f23fc7589764e1b1022e84e21bcc6338cafa0612ba89038db224a9983d6a84cb5f8588495cb0d3cc
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMR4CO/x9qqDLuBsL27aR:OAQsgScEyd4C1qnug2mR
- TLSH T18D745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-31_72ed1b3cc4d02b0c9a8b3032ae694d03_darkgate_elex_gcleaner_trigona.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_72ed1b3cc4d02b0c9a8b3032ae694d03_darkgate_elex_gcleaner_trigona.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_72ed1b3cc4d02b0c9a8b3032ae694d03_darkgate_elex_gcleaner_trigona
- Size 342KB
- SHA256 7975972f5951ed321887d00c45aaa225f789666dae806940e63a66c3679b0f6b
- MD5 72ed1b3cc4d02b0c9a8b3032ae694d03
- SHA1 7aba747a41b04c0ed2acaa41354f07b43ec44dc0
- SHA512 ec686240173e6eedd578ef2f8470ccf6e23009e498ef9c30f23fc7589764e1b1022e84e21bcc6338cafa0612ba89038db224a9983d6a84cb5f8588495cb0d3cc
- SSDEEP 6144:Ox2QdiglMFGfzIBeZO8Wf2cMR4CO/x9qqDLuBsL27aR:OAQsgScEyd4C1qnug2mR
- TLSH T18D745A3E96814436E0710AF18B66831C603F7E2019F55C5E2DEB5AFCDE3B6536A34B86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects command variations typically used by ransomware
-
Drops desktop.ini file(s)