925591c1232aeb577e5b3fae122b83605cd87d3acf60842d2cc96d4756a855f3

Analysis

max time kernel
143s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
10/10/2023, 19:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
11102023_0331_drkgate_1010_02.exe
Size 388KB
Sample231010-x8d3fsac75
SHA256 925591c1232aeb577e5b3fae122b83605cd87d3acf60842d2cc96d4756a855f3
MD5 88e9371105c29a015159d3485d486e73
SHA1 bd6698c99765a91a86208bb68c46b8db0c9513fb
SHA512 03f135636e9666876706e6820c30f6d23b3d53a049938c4d00544d568deb484bad0bed7b55314bcbe6fd1eb7be01e80f7592e890122543514d5fe559ebe29cc5
SSDEEP 6144:s50tl7kAfri5ZhtWtIv9n0YQFaVfTnU6UVtm+aq1nMyCCBgT2Pt:a0tlBi5ZhtWtIv50genn91n1CCBj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	11102023_0331_drkgate_1010_02.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	11102023_0331_drkgate_1010_02.exe

C:\Users\Admin\AppData\Local\Temp\11102023_0331_drkgate_1010_02.exe
"C:\Users\Admin\AppData\Local\Temp\11102023_0331_drkgate_1010_02.exe"
1⤵
- Checks processor information in registry
PID:4420

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4420-1-0x0000000000400000-0x0000000000467000-memory.dmp

Download