General
- Target 2026-09-10_743402fa91396a07ffb5f315b73530a0_darkgate_elex_gcleaner_ransomlock
- Size 436KB
- Sample260910-sm1l4sdl4w
- SHA256 361c1379bf498ffb361516c55e3ca5f491b4f8e8d1d3a10a1778b968988fe07b
- MD5 743402fa91396a07ffb5f315b73530a0
- SHA1 7aa3af556e1906a01bf990c5ace6bbfa4b2c30a7
- SHA512 db908783b4f876cbfe1698bfe447e0eac11f3af88e5e7467ed5a5fd2faf99cc376ab207a9b16cb56f2f1eade30333f243db118a065de23a00430bb32cd87d652
- SSDEEP 12288:7MSU4joci8M6PW1GVFeFd60DFUyhelYM:ASUCpM2W1Gvgmyelv
- TLSH T1F1947D27F6D08437D16336B9DC1B9698A929BD505D24244A3BF83E4C4F39383F92629F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_743402fa91396a07ffb5f315b73530a0_darkgate_elex_gcleaner_ransomlock.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_743402fa91396a07ffb5f315b73530a0_darkgate_elex_gcleaner_ransomlock.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_743402fa91396a07ffb5f315b73530a0_darkgate_elex_gcleaner_ransomlock
- Size 436KB
- SHA256 361c1379bf498ffb361516c55e3ca5f491b4f8e8d1d3a10a1778b968988fe07b
- MD5 743402fa91396a07ffb5f315b73530a0
- SHA1 7aa3af556e1906a01bf990c5ace6bbfa4b2c30a7
- SHA512 db908783b4f876cbfe1698bfe447e0eac11f3af88e5e7467ed5a5fd2faf99cc376ab207a9b16cb56f2f1eade30333f243db118a065de23a00430bb32cd87d652
- SSDEEP 12288:7MSU4joci8M6PW1GVFeFd60DFUyhelYM:ASUCpM2W1Gvgmyelv
- TLSH T1F1947D27F6D08437D16336B9DC1B9698A929BD505D24244A3BF83E4C4F39383F92629F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application