darkgate | a472d8d25dd311f25e0c79e5e3b6ea8680dc5b00e2e7cc51f0f7f2a004adbdef

Analysis

max time kernel
123s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
03/10/2023, 01:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

mkpub_darkgate_0210.exe
Size

481KB
MD5

e55cd66c58a5a813e08f696d1268a704
SHA1

1362fd43263c75d1d38d5ece57cd6eb6504638a4
SHA256

a472d8d25dd311f25e0c79e5e3b6ea8680dc5b00e2e7cc51f0f7f2a004adbdef
SHA512

0a65cbcb12008521768360a7686da5278ce0f55ee36e22be97d2678b2f8d87ba438fa60ac1d18fea55ae7a5e948b504a49692a160ab0894ff8e7c1d9b7a48d66
SSDEEP

12288:73wfF2uWIOyAxbhWyElk3Xb8ruWqW3GMRIYQIpemqnu5/9aJCE:7S2uWyAXWyElwL8rjv3qYdpem+u581

Score

10^/10

darkgate stealer

Malware Config

Extracted

Family

darkgate

http://searcherbigdealk.com

Signatures

DarkGate
DarkGate is an infostealer written in C++.
stealer darkgate

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	mkpub_darkgate_0210.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	mkpub_darkgate_0210.exe

C:\Users\Admin\AppData\Local\Temp\mkpub_darkgate_0210.exe
"C:\Users\Admin\AppData\Local\Temp\mkpub_darkgate_0210.exe"
1⤵
- Checks processor information in registry
PID:2588

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2588-0-0x0000000000400000-0x0000000000480000-memory.dmp

Filesize
512KB

Download