General
- Target 2026-10-26_8a34b340ff13c72218d2c64fb6bb57a4_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- Sample261027-pm75eade67
- SHA256 20fe3bd8b259bd6a550dc26081110219fcf26b010755c0e33b89ecd55ee74d6e
- MD5 8a34b340ff13c72218d2c64fb6bb57a4
- SHA1 a827e1307e6e47571ceff8b65c663a3e54b13eef
- SHA512 c01b679c98ea57e4310ece9dea7431cada05dbd11b644bd2afb149c6b4e8490046a1a5d59d5fe7a45f2b7f5848d9347eb13eeaafff2acbb912c7908642590af6
- SSDEEP 49152:BNZCWOLT4IzGAJmdK2MtENiWzsyfVJXwl/5xz:vwnLTlGAVcsyj+xz
- TLSH T1D7957C1667F95128F1F33B71EEB992645A77BC71AD3AC50E6280025E0DB4E50DA32B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_8a34b340ff13c72218d2c64fb6bb57a4_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_8a34b340ff13c72218d2c64fb6bb57a4_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_8a34b340ff13c72218d2c64fb6bb57a4_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- SHA256 20fe3bd8b259bd6a550dc26081110219fcf26b010755c0e33b89ecd55ee74d6e
- MD5 8a34b340ff13c72218d2c64fb6bb57a4
- SHA1 a827e1307e6e47571ceff8b65c663a3e54b13eef
- SHA512 c01b679c98ea57e4310ece9dea7431cada05dbd11b644bd2afb149c6b4e8490046a1a5d59d5fe7a45f2b7f5848d9347eb13eeaafff2acbb912c7908642590af6
- SSDEEP 49152:BNZCWOLT4IzGAJmdK2MtENiWzsyfVJXwl/5xz:vwnLTlGAVcsyj+xz
- TLSH T1D7957C1667F95128F1F33B71EEB992645A77BC71AD3AC50E6280025E0DB4E50DA32B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory