General
- Target 2026-10-25_b97dc819f7a493ee1d099acc48fd4d8b_darkgate_elex_remcos_rhadamanthys_stop
- Size 1.1MB
- Sample261026-ry7n5aev9x
- SHA256 98092d6800f85a9084be132437d5f8d16ba1d426b9b79693cd2f6a96380c86f6
- MD5 b97dc819f7a493ee1d099acc48fd4d8b
- SHA1 8f38f45199c465c283bc1f6002f7b7c6cbe969b2
- SHA512 f3d0408d74b8496c2fcc97a1a427e377e3788428b563178c2b1d24c7bc50bccd5b137fe1bdb23e336f0d6d8f4eb6b7de59571ab5126e90e8ef39c75825e2fd92
- SSDEEP 24576:6y0Hgd6Sb1JCseolRtsuLEDGACOZJI+FOL9ATfxfX2W0whQO1yD092W:AHgvBJttpz4RS9kfxT1yg9v
- TLSH T176450240BFCCD070D64618768596D736663E7E64272489C3A7F43B99AE306D2FE3930A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-25_b97dc819f7a493ee1d099acc48fd4d8b_darkgate_elex_remcos_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-25_b97dc819f7a493ee1d099acc48fd4d8b_darkgate_elex_remcos_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-25_b97dc819f7a493ee1d099acc48fd4d8b_darkgate_elex_remcos_rhadamanthys_stop
- Size 1.1MB
- SHA256 98092d6800f85a9084be132437d5f8d16ba1d426b9b79693cd2f6a96380c86f6
- MD5 b97dc819f7a493ee1d099acc48fd4d8b
- SHA1 8f38f45199c465c283bc1f6002f7b7c6cbe969b2
- SHA512 f3d0408d74b8496c2fcc97a1a427e377e3788428b563178c2b1d24c7bc50bccd5b137fe1bdb23e336f0d6d8f4eb6b7de59571ab5126e90e8ef39c75825e2fd92
- SSDEEP 24576:6y0Hgd6Sb1JCseolRtsuLEDGACOZJI+FOL9ATfxfX2W0whQO1yD092W:AHgvBJttpz4RS9kfxT1yg9v
- TLSH T176450240BFCCD070D64618768596D736663E7E64272489C3A7F43B99AE306D2FE3930A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory