General
- Target 2026-09-05_51d753778a8a37ae987e79d20c6d7306_amadey_darkgate_elex_stop_vidar
- Size 24.3MB
- Sample260907-2r6hlaxbld
- SHA256 3f75a902ec83b38ad347ca5adb85671977d3dda720e87cc8c4570debf987c573
- MD5 51d753778a8a37ae987e79d20c6d7306
- SHA1 24d1fdbfce7e2310229fd7a1b3d7ac1eee1256fe
- SHA512 2d2c21dafabf78c3d34f097cb152ea2eaed061d84af42fb84f31b7e193afc97067095b99a01c3e6b236b68bcfaee98fa848977dd4f3bda59757f5c9c23cc44c2
- SSDEEP 49152:U+ESm+ES+ESm+ES+ESm+ES+ESgsAoK+ESm+ES+ESm+ES+ESm+ES+ESgq+ESm+ESz:Rp7e
- TLSH T189472A09F98340B1D82B51B04DCBD3BF8A70BB2586128EFBF74DCB5B6933BA15428655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-05_51d753778a8a37ae987e79d20c6d7306_amadey_darkgate_elex_stop_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_51d753778a8a37ae987e79d20c6d7306_amadey_darkgate_elex_stop_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_51d753778a8a37ae987e79d20c6d7306_amadey_darkgate_elex_stop_vidar
- Size 24.3MB
- SHA256 3f75a902ec83b38ad347ca5adb85671977d3dda720e87cc8c4570debf987c573
- MD5 51d753778a8a37ae987e79d20c6d7306
- SHA1 24d1fdbfce7e2310229fd7a1b3d7ac1eee1256fe
- SHA512 2d2c21dafabf78c3d34f097cb152ea2eaed061d84af42fb84f31b7e193afc97067095b99a01c3e6b236b68bcfaee98fa848977dd4f3bda59757f5c9c23cc44c2
- SSDEEP 49152:U+ESm+ES+ESm+ES+ESm+ES+ESgsAoK+ESm+ES+ESm+ES+ESm+ES+ESgq+ESm+ESz:Rp7e
- TLSH T189472A09F98340B1D82B51B04DCBD3BF8A70BB2586128EFBF74DCB5B6933BA15428655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1