General

  • Target

    mkhg_dark.bin

  • Size

    481KB

  • MD5

    f242ce468771de8c7a23568a3b03a5e2

  • SHA1

    1d1fef713894ee6fe308c8cdf93506f0d7b2ada5

  • SHA256

    0f1545a7176c45b0e7f9198cac8972167e5846e8b84cd40926f7edf338eeace2

  • SHA512

    61328febc6d74b2f62e1609536b007643a9516dd44a813335da8452aa1fa0b5767d0c27fcb3f251b5abd759459ac1e9ae58cc896a12b94bd9c859db8eb7288c9

  • SSDEEP

    12288:73wfF2uWIOyAxbhWyElk3Xb8ruWqW3GMRIYQIpewqnu5/9aJCE:7S2uWyAXWyElwL8rjv3qYdpew+u581

Score
10/10

Malware Config

Extracted

Family

darkgate

C2

http://94.228.169.143

Signatures

  • Darkgate family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mkhg_dark.bin
    .exe windows x86

    Password: infected


    Headers

    Sections