General

  • Target
    2026-09-05_51d753778a8a37ae987e79d20c6d7306_amadey_darkgate_elex_stop_vidar
  • Size 24.3MB
  • Sample260907-2r6hlaxbld
  • SHA256 3f75a902ec83b38ad347ca5adb85671977d3dda720e87cc8c4570debf987c573
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-05_51d753778a8a37ae987e79d20c6d7306_amadey_darkgate_elex_stop_vidar
    • Size 24.3MB
    • SHA256 3f75a902ec83b38ad347ca5adb85671977d3dda720e87cc8c4570debf987c573
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects executables embedding registry key / value combination indicative of disabling Windows Defen

    • Creates new service(s)

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks