General
- Target 2026-10-26_63f4941ee8e281bb1745830bd8f17e91_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- Sample261027-ta7ekadh94
- SHA256 58148e4ac688bc247ad1e437deccf551271b2517698923c3b214fbc09079fd39
- MD5 63f4941ee8e281bb1745830bd8f17e91
- SHA1 cb845d507168f954af7b03876383341f0ab4e363
- SHA512 caef105589ed6897d0aaf88f021accb2bca0454ee2b28f59e71f61174e3287ec7551e9e81d0e52a7b3f6b24c32815ef447745268ea15e3d46e9b102cf739a586
- SSDEEP 49152:nNZCWOLT4IzGermqK2MtENvgODqSenWIitJh8:NwnLTlGeKc1P
- TLSH T169957C0667F95129F2F33B71EEB992645A77BC71AD3AC50E6280025E0CB4E50DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_63f4941ee8e281bb1745830bd8f17e91_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_63f4941ee8e281bb1745830bd8f17e91_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_63f4941ee8e281bb1745830bd8f17e91_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- SHA256 58148e4ac688bc247ad1e437deccf551271b2517698923c3b214fbc09079fd39
- MD5 63f4941ee8e281bb1745830bd8f17e91
- SHA1 cb845d507168f954af7b03876383341f0ab4e363
- SHA512 caef105589ed6897d0aaf88f021accb2bca0454ee2b28f59e71f61174e3287ec7551e9e81d0e52a7b3f6b24c32815ef447745268ea15e3d46e9b102cf739a586
- SSDEEP 49152:nNZCWOLT4IzGermqK2MtENvgODqSenWIitJh8:NwnLTlGeKc1P
- TLSH T169957C0667F95129F2F33B71EEB992645A77BC71AD3AC50E6280025E0CB4E50DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory