General
- Target 2026-11-06_ce2174b5b1583cc22d40f480a9aaf7d3_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- Sample261107-2xt2rasv4n
- SHA256 32d16067c5fb7e6bab66542e548faccf2730040bc1dc83e4de9162a3aa484b24
- MD5 ce2174b5b1583cc22d40f480a9aaf7d3
- SHA1 459b12f3868798adeeebe4067e318d467d00461d
- SHA512 c51fab494eba27ded34d68c7ff6813e08b05b52faef7b8b86e7f3fce9bed89053d41a004eaf91893d67a835dea93f1493bb52e6fc1eb282c5228c76e148fded0
- SSDEEP 49152:nNZCWOLT4kGG+EmhK2MtENur+HY+SlHbSwiE5DUX6TqY:NwnLTQG+4RV+Q7fiMDEeh
- TLSH T132957B1667F94128F1F33B71EEB992645A77BC71AE3AC50E5280025E0DB4E90DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-06_ce2174b5b1583cc22d40f480a9aaf7d3_darkgate_elex_rhadamanthys_stop.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-06_ce2174b5b1583cc22d40f480a9aaf7d3_darkgate_elex_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_ce2174b5b1583cc22d40f480a9aaf7d3_darkgate_elex_rhadamanthys_stop
- Size 1.9MB
- SHA256 32d16067c5fb7e6bab66542e548faccf2730040bc1dc83e4de9162a3aa484b24
- MD5 ce2174b5b1583cc22d40f480a9aaf7d3
- SHA1 459b12f3868798adeeebe4067e318d467d00461d
- SHA512 c51fab494eba27ded34d68c7ff6813e08b05b52faef7b8b86e7f3fce9bed89053d41a004eaf91893d67a835dea93f1493bb52e6fc1eb282c5228c76e148fded0
- SSDEEP 49152:nNZCWOLT4kGG+EmhK2MtENur+HY+SlHbSwiE5DUX6TqY:NwnLTQG+4RV+Q7fiMDEeh
- TLSH T132957B1667F94128F1F33B71EEB992645A77BC71AE3AC50E5280025E0DB4E90DA72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Checks whether UAC is enabled
Drops file in System32 directory