General
- Target 2026-11-06_cb6f6dde6867738fec581d4da2e9995c_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- Sample261107-29wfcasv8p
- SHA256 be68335c2cfdb91e86a47e3205851e37205db5607e2d78406df5fadb639156ae
- MD5 cb6f6dde6867738fec581d4da2e9995c
- SHA1 f70a8afdc64c8dab90a43843e9fa06c107b128c2
- SHA512 90490e3c22b19a7d5dbd5d6c5c0391827741d72cc12b237bb5504eda4f77d42ca95e537c0687428a4374d27d2b2e9930caf25b5d03902e6607a1368009f09800
- SSDEEP 49152:xNZCWOLT4kGGgvmDK2MtENznswW+rN5Mkniz9C3s3Ba0A:fwnLTQGgxIsiN5Mk03Be
- TLSH T185957C1663F95129F1F33B71EEB992645A77BC71AE3AC50E5280025E0DB4E90DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-06_cb6f6dde6867738fec581d4da2e9995c_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_cb6f6dde6867738fec581d4da2e9995c_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_cb6f6dde6867738fec581d4da2e9995c_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- SHA256 be68335c2cfdb91e86a47e3205851e37205db5607e2d78406df5fadb639156ae
- MD5 cb6f6dde6867738fec581d4da2e9995c
- SHA1 f70a8afdc64c8dab90a43843e9fa06c107b128c2
- SHA512 90490e3c22b19a7d5dbd5d6c5c0391827741d72cc12b237bb5504eda4f77d42ca95e537c0687428a4374d27d2b2e9930caf25b5d03902e6607a1368009f09800
- SSDEEP 49152:xNZCWOLT4kGGgvmDK2MtENznswW+rN5Mkniz9C3s3Ba0A:fwnLTQGgxIsiN5Mk03Be
- TLSH T185957C1663F95129F1F33B71EEB992645A77BC71AE3AC50E5280025E0DB4E90DA32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks whether UAC is enabled
Drops file in System32 directory