General
- Target 2026-10-11_9c7694257cbb3a25335cd46eccff4cb0_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- Sample261012-scxgpsxthy
- SHA256 1c93d227206f52d3bd31435f58c0bfbe8f717b6a9f901cb6e48c744c0ed429d8
- MD5 9c7694257cbb3a25335cd46eccff4cb0
- SHA1 65805557d314c3e0a050acfc07a9751d041949e4
- SHA512 a266ab59363880072e6bdc6a8559e1ef6d1e7cd0458593597c0aa2ba0faa1fdddff004a0624ab3ebe60cc671c100b1f79f277334f3db8cff193fac26f47b422c
- SSDEEP 49152:BNZCWOLT4JRGs7muK2MtENIUTi4rBAKd6+fGJEpjmzTl:vwnLTUGseEi0BA1paJml
- TLSH T14B957C0667F95128F1F33B71EEB992645A77BC71AE3AC50E6280015E0DB4E90DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_9c7694257cbb3a25335cd46eccff4cb0_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_9c7694257cbb3a25335cd46eccff4cb0_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_9c7694257cbb3a25335cd46eccff4cb0_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- SHA256 1c93d227206f52d3bd31435f58c0bfbe8f717b6a9f901cb6e48c744c0ed429d8
- MD5 9c7694257cbb3a25335cd46eccff4cb0
- SHA1 65805557d314c3e0a050acfc07a9751d041949e4
- SHA512 a266ab59363880072e6bdc6a8559e1ef6d1e7cd0458593597c0aa2ba0faa1fdddff004a0624ab3ebe60cc671c100b1f79f277334f3db8cff193fac26f47b422c
- SSDEEP 49152:BNZCWOLT4JRGs7muK2MtENIUTi4rBAKd6+fGJEpjmzTl:vwnLTUGseEi0BA1paJml
- TLSH T14B957C0667F95128F1F33B71EEB992645A77BC71AE3AC50E6280015E0DB4E90DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory