Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
13/09/2026, 03:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_3d59e6fb0272bb92be56586e705e6f17_darkgate_elex_gcleaner_ransomlock.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_3d59e6fb0272bb92be56586e705e6f17_darkgate_elex_gcleaner_ransomlock.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-09-12_3d59e6fb0272bb92be56586e705e6f17_darkgate_elex_gcleaner_ransomlock.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-12_3d59e6fb0272bb92be56586e705e6f17_darkgate_elex_gcleaner_ransomlock.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-09-12_3d59e6fb0272bb92be56586e705e6f17_darkgate_elex_gcleaner_ransomlock.exe
- Size 436KB
- Sample260913-dreg4sed55
- SHA256 7e202823af40b26d9430953bd270d58480c184f4d44fc2dbdb139f5f9bf5b3bb
- MD5 3d59e6fb0272bb92be56586e705e6f17
- SHA1 c68e404b3b718889fc8b72d4b7cf4b8c57dd5f14
- SHA512 e81b46442afee50416492590c51234eea0cbdae9a84b9852673678fee27095c1ebfb23948252147fe89eccb8d9847c0b241c7fabe2784d989d4376c87a7d35b1
- SSDEEP 12288:vMSU4joci8M6PW1GVFeFd60DFUyheEYM:kSUCpM2W1GvgmyeEv
- TLSH T1FE947D27F6D08437D16336B9DC179698A929BD501E24644A3BF83E4C4F39383F92629F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10