General
-
Target
888-16-0x0000000004660000-0x0000000004A23000-memory.dmp
-
Size
3.8MB
-
Sample
231011-2xzx1ace42
-
MD5
178097c0b0415e3a40ebceead95a2a2c
-
SHA1
71cb0d63fb07c5449cd5f8d054d922c20b9e19b6
-
SHA256
1975db054c908cf586ebec6b87c3e762ca5ed64d29efec2c58b587cd54f79dce
-
SHA512
fb6dc85f43f2697da7ef70555baba849e6a043ee3adfeddcad98d52678a08aeaeed0e3a45291ddeaa00a0c9b73eca3af8c494d64be94159013aab239af8a5d8a
-
SSDEEP
12288:aNYHdW3r8U7jzs6uLlMRtlktMu8Mfw1y6YXzy/qnuR/lJC:aMdWIUrs6uLlOXktJno1ydzy/+uB3
Malware Config
Extracted
Family
darkgate
Botnet
AA11
C2
http://94.228.169.143
Attributes
-
alternative_c2_port
8080
-
anti_analysis
true
-
anti_debug
true
-
anti_vm
false
-
c2_port
2351
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
true
-
crypter_dll
false
-
crypter_rawstub
false
-
crypto_key
IDmfxvToPtabWZ
-
internal_mutex
txtMut
-
minimum_disk
100
-
minimum_ram
4096
-
ping_interval
4
-
rootkit
true
-
startup_persistence
true
-
username
AA11