darkgate | bc9128a5f9178133a4a460dc4f8d71c7de89384bcaa338948e48e9932ae934c5 | Triage

Sharing

General

Target

b9a84e8c671256d41332cdde5a8683cf.bin
Size

246KB
Sample

230928-cr7cfsfd9t
MD5

56008fec5f88555d06e609b0e278a6f1
SHA1

abd48de62160af8afa18899458ca33a8aa929934
SHA256

bc9128a5f9178133a4a460dc4f8d71c7de89384bcaa338948e48e9932ae934c5
SHA512

d2e0b8637fc39aadc4281415c1540e33c01545bea200733945181223afc8a040243a9ced2c0d46619d0d451e50afec1041e6d83d36b95e8d8fb9c43b3743c9a4
SSDEEP

6144:NcFS7kxIVax4J9xmWtA9SuuEHzRIkZoEH2q:ijxZx6xttAYuuAtOYJ

Score

10^/10

darkgate stealer

Malware Config

Extracted

Family

darkgate

C2

http://94.228.169.143

Targets

- Target
  
  4b67e4cea7a978c9a6a73d6217d2d55ee7d6ce3c2b5e6e6a4f59b5e5deb5a4e2.exe
- Size
  
  481KB
- MD5
  
  b9a84e8c671256d41332cdde5a8683cf
- SHA1
  
  f75e68bbe13a90c232bb828c2484919946bd74a1
- SHA256
  
  4b67e4cea7a978c9a6a73d6217d2d55ee7d6ce3c2b5e6e6a4f59b5e5deb5a4e2
- SHA512
  
  4f0f9e39ac006600be587e4e4b35d37b9cd03f092bffeed2a8e78c271cbb18541a4f1566191d41f1a9b579383692acae029ab7c3725af74edc6d8251e820db75
- SSDEEP
  
  12288:73wfF2uWIOyAxbhWyElk3Xb8ruWqW3GMRIYQIpeXqnu5/9aJCE:7S2uWyAXWyElwL8rjv3qYdpeX+u581
Score

10^/10

darkgate stealer
- DarkGate
  DarkGate is an infostealer written in C++.
  stealer darkgate
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkgatestealer

behavioral2

darkgatestealer