General
- Target 2026-09-05_6e573bb9fdb7ba8b95bb063a16cd0fba_amadey_darkgate_elex_stop_vidar
- Size 26.5MB
- Sample260907-w4hdms1wft
- SHA256 170b5fd227d22d1ba9500c9935b80432c73ce1bb956c98e6bd105325df002283
- MD5 6e573bb9fdb7ba8b95bb063a16cd0fba
- SHA1 39ad184ffebbf7e97b3dfa5cd5a1e95c215b26c8
- SHA512 44a6a72ef2139bd2e71fd5307ceb38b4e3828ebd7a2ceef7b0b7ab44e421daa837c44565e3cc9d1a78028d1dd08375d31c3424ffba676826cfdda4861be288fd
- SSDEEP 49152:U+ESgX+ESm+ES+ESm+ES+ESm+ES+ESgq+ESm+ES+ESm+ES+ESm+ES+ESgsAoK+Es:Jp7e
- TLSH T138572B09F98340B1D82B51B04DCBD3BF8A70BB2586128EFBF74DCB5B6933BA15428655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-05_6e573bb9fdb7ba8b95bb063a16cd0fba_amadey_darkgate_elex_stop_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_6e573bb9fdb7ba8b95bb063a16cd0fba_amadey_darkgate_elex_stop_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_6e573bb9fdb7ba8b95bb063a16cd0fba_amadey_darkgate_elex_stop_vidar
- Size 26.5MB
- SHA256 170b5fd227d22d1ba9500c9935b80432c73ce1bb956c98e6bd105325df002283
- MD5 6e573bb9fdb7ba8b95bb063a16cd0fba
- SHA1 39ad184ffebbf7e97b3dfa5cd5a1e95c215b26c8
- SHA512 44a6a72ef2139bd2e71fd5307ceb38b4e3828ebd7a2ceef7b0b7ab44e421daa837c44565e3cc9d1a78028d1dd08375d31c3424ffba676826cfdda4861be288fd
- SSDEEP 49152:U+ESgX+ESm+ES+ESm+ES+ESm+ES+ESgq+ESm+ES+ESm+ES+ESm+ES+ESgsAoK+Es:Jp7e
- TLSH T138572B09F98340B1D82B51B04DCBD3BF8A70BB2586128EFBF74DCB5B6933BA15428655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1