General
- Target 2026-11-02_c75f1c2380931229782493fdfde67b17_darkgate_elex_rhadamanthys_stop
- Size 2.0MB
- Sample261102-2zdsjsxvdy
- SHA256 316a6313ad928f2bc7ac55c6dad258e34203fa98db173c35238d425799a6a1af
- MD5 c75f1c2380931229782493fdfde67b17
- SHA1 6dd98b834b5707e887c704799889960bce8a945c
- SHA512 aa2072138684edc2c68330c850c5902a579cf34f65a49db6c474fae56194cd2f39e7b8f8b9fa432f5e345b09e3b4a1a08ba744ac942f6868d7454bdcc831d2c5
- SSDEEP 24576:jHAo3AdBheQgOjYTx7BzCTPkBzWk0NYI7ZlWRl/ERGiArdCN/j2GLl3iFSE33b9:jg57iSTPWz50NYI1MRlpizN/j2U4FH
- TLSH T1E4A5D090EE8D816DFE731171CD639B3D17216DF347E191B3A9803B5A7A3E090696BE02
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_c75f1c2380931229782493fdfde67b17_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_c75f1c2380931229782493fdfde67b17_darkgate_elex_rhadamanthys_stop
- Size 2.0MB
- SHA256 316a6313ad928f2bc7ac55c6dad258e34203fa98db173c35238d425799a6a1af
- MD5 c75f1c2380931229782493fdfde67b17
- SHA1 6dd98b834b5707e887c704799889960bce8a945c
- SHA512 aa2072138684edc2c68330c850c5902a579cf34f65a49db6c474fae56194cd2f39e7b8f8b9fa432f5e345b09e3b4a1a08ba744ac942f6868d7454bdcc831d2c5
- SSDEEP 24576:jHAo3AdBheQgOjYTx7BzCTPkBzWk0NYI7ZlWRl/ERGiArdCN/j2GLl3iFSE33b9:jg57iSTPWz50NYI1MRlpizN/j2U4FH
- TLSH T1E4A5D090EE8D816DFE731171CD639B3D17216DF347E191B3A9803B5A7A3E090696BE02
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1