General
- Target 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop
- Size 9.2MB
- Sample260922-1pjelsshqf
- SHA256 015101597ba0c91321c4d34d0d61722a03023fc196e21a49f8108ae2b41d92f1
- MD5 270353d53db991d82924a2483f7e365b
- SHA1 d42495ecde9b5fef29f2c5479a325bc0abfa768b
- SHA512 e10980ee74148f6cf88799c46dc942ac352a8eb90a2bc6244f496a7b7c0da3bf8e2c2cef82707e2b90df2c0ef40a84a1f0fb796ad3188d3f82c0ea6ac2ef8b4a
- SSDEEP 196608:yIaqUBSx6irchOpF4TVxNgNjuVRjo1U2tku+kiOr3DQg9:ZaqUBI6ir9iDk6VRsHkuDHUE
- TLSH T1BBA6121337D38022E6A21530D6E9D33992AD6D745A22C99B53E07F1FBF789839935B03
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-22_270353d53db991d82924a2483f7e365b_darkgate_elex_rhadamanthys_stop
- Size 9.2MB
- SHA256 015101597ba0c91321c4d34d0d61722a03023fc196e21a49f8108ae2b41d92f1
- MD5 270353d53db991d82924a2483f7e365b
- SHA1 d42495ecde9b5fef29f2c5479a325bc0abfa768b
- SHA512 e10980ee74148f6cf88799c46dc942ac352a8eb90a2bc6244f496a7b7c0da3bf8e2c2cef82707e2b90df2c0ef40a84a1f0fb796ad3188d3f82c0ea6ac2ef8b4a
- SSDEEP 196608:yIaqUBSx6irchOpF4TVxNgNjuVRjo1U2tku+kiOr3DQg9:ZaqUBI6ir9iDk6VRsHkuDHUE
- TLSH T1BBA6121337D38022E6A21530D6E9D33992AD6D745A22C99B53E07F1FBF789839935B03
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1