General
- Target 2026-11-01_899b9b7b7d9359a546c2542b1df85341_darkgate_elex_emotet_magniber_rhadamanthys_stop
- Size 2.8MB
- Sample261102-s193psa181
- SHA256 08ff518e7f390b8dd6fcf2407055f5c06029948b976b9df329681d6999cc5c11
- MD5 899b9b7b7d9359a546c2542b1df85341
- SHA1 a679626de40c020052975afe06720aceb1d5f1da
- SHA512 013407e6ea3f7153f17490d023efc38cd3427e55b19c269715bc8b886c57378f9eea5dcdb89c1df74f7cc2a6c9b8725f895427fd27bdbf35c7939be712c5f88e
- SSDEEP 49152:iINBEPTR0bI95mC2/hkj8TTdIDVO+Pup3aVgGCqTuZTAss4Eb25ATlDU4yDcuxz3:iIiTR0bMMhkj8TTWDVDPupqVgGtTuZT1
- TLSH T1D2D5AE263BD0C076C2333635860EA3B9A2EAE9715E75434B65501F3D6F385839A3DA1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_899b9b7b7d9359a546c2542b1df85341_darkgate_elex_emotet_magniber_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_899b9b7b7d9359a546c2542b1df85341_darkgate_elex_emotet_magniber_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_899b9b7b7d9359a546c2542b1df85341_darkgate_elex_emotet_magniber_rhadamanthys_stop
- Size 2.8MB
- SHA256 08ff518e7f390b8dd6fcf2407055f5c06029948b976b9df329681d6999cc5c11
- MD5 899b9b7b7d9359a546c2542b1df85341
- SHA1 a679626de40c020052975afe06720aceb1d5f1da
- SHA512 013407e6ea3f7153f17490d023efc38cd3427e55b19c269715bc8b886c57378f9eea5dcdb89c1df74f7cc2a6c9b8725f895427fd27bdbf35c7939be712c5f88e
- SSDEEP 49152:iINBEPTR0bI95mC2/hkj8TTdIDVO+Pup3aVgGCqTuZTAss4Eb25ATlDU4yDcuxz3:iIiTR0bMMhkj8TTWDVDPupqVgGtTuZT1
- TLSH T1D2D5AE263BD0C076C2333635860EA3B9A2EAE9715E75434B65501F3D6F385839A3DA1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1