General
-
Target
74729d4569691daf72e23849e91461471411f551639663e11e1091a48790611eexe_JC.exe
-
Size
481KB
-
MD5
9bf2ae2da16e9a975146c213abd7cd4f
-
SHA1
b4850a42227dc43d4079392eb3a449e8a3f6312d
-
SHA256
74729d4569691daf72e23849e91461471411f551639663e11e1091a48790611e
-
SHA512
64a789860f2ffa9a57594de7cbd7d2e78aee0380a2caad54cba7495f39a509177206f2d3bc85ec3a074164349395598cc7c1a57914409939e22e1ed272078623
-
SSDEEP
12288:73wfF2uWIOyAxbhWyElk3Xb8ruWqW3GMRIYQIpezqnu5/9aJCE:7S2uWyAXWyElwL8rjv3qYdpez+u581
Score
10/10
Malware Config
Extracted
Family
darkgate
Botnet
A1111
C2
http://getldrrgoodgame.com
Attributes
-
alternative_c2_port
8080
-
anti_analysis
true
-
anti_debug
true
-
anti_vm
false
-
c2_port
2351
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
true
-
crypter_dll
false
-
crypter_rawstub
false
-
crypto_key
eYCqpouVyqrXSL
-
internal_mutex
txtMut
-
minimum_disk
100
-
minimum_ram
4096
-
ping_interval
4
-
rootkit
true
-
startup_persistence
true
-
username
A1111
Signatures
-
Darkgate family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
74729d4569691daf72e23849e91461471411f551639663e11e1091a48790611eexe_JC.exe
Headers
Sections