Extracted

• • Target

    Test_395-32217.vbs

  • Size

    2.3MB

  • MD5

    c28396bac68b9bb0186a5c0604304099

  • SHA1

    2073aef8d1b9b4971088644b4e09f7f417c615f9

  • SHA256

    1295bda56de98063e23904ebb5deaf00e41f7f59c53aea1ec014aa4ec57df8df

  • SHA512

    dc7a34b6a602d3aa1952492a9fbc78d23b644d8e483911cb0798e1d49177c1755718b17fc3470c596f708118075b6b3d3d58040e581d5c5eae0179a310631f6b

  • SSDEEP

    49152:jvPuvYvG2sIS6hkJqLuKbhug8l01OnhyxH:P

  Score

  10^/10

  darkgatestealer

  • DarkGate

    DarkGate is an infostealer written in C++.

    stealerdarkgate

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2