General
- Target 2026-10-26_55e3bb113419544eebd32c69febe4e8d_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- Sample261027-vm97naex7v
- SHA256 15c3dd942848d6c4a5298370f38722307f8c02d123676efede00733cee72f919
- MD5 55e3bb113419544eebd32c69febe4e8d
- SHA1 7d7d37ba739293ac427c9a3cb391806d93d2690e
- SHA512 bcef32ba2472bb081c5af20d20be733c4b64dafbb770df31d665af00ad8701fba4792ca6dfc495b29c9c6812c6f0cdc325dc19e2832091bb7e1212589718eac9
- SSDEEP 49152:BNZCWOLT4IzGAwmaK2MtENNnpXoRn0PMuTF1Ad:vwnLTlGA1OXy00u4
- TLSH T13F956C0667F95128F1F33B71EEB992645A77BC71AE3AC50E6280125E0DB4E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_55e3bb113419544eebd32c69febe4e8d_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_55e3bb113419544eebd32c69febe4e8d_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_55e3bb113419544eebd32c69febe4e8d_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- SHA256 15c3dd942848d6c4a5298370f38722307f8c02d123676efede00733cee72f919
- MD5 55e3bb113419544eebd32c69febe4e8d
- SHA1 7d7d37ba739293ac427c9a3cb391806d93d2690e
- SHA512 bcef32ba2472bb081c5af20d20be733c4b64dafbb770df31d665af00ad8701fba4792ca6dfc495b29c9c6812c6f0cdc325dc19e2832091bb7e1212589718eac9
- SSDEEP 49152:BNZCWOLT4IzGAwmaK2MtENNnpXoRn0PMuTF1Ad:vwnLTlGA1OXy00u4
- TLSH T13F956C0667F95128F1F33B71EEB992645A77BC71AE3AC50E6280125E0DB4E50DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Drops file in System32 directory