General
-
Target
396-14-0x0000000003C20000-0x0000000003FE3000-memory.dmp
-
Size
3.8MB
-
Sample
231011-mbwacsac84
-
MD5
67bde08d0f162b115aa020f230ec6642
-
SHA1
aec20cdd8d0d133d2c7fa22dac2358f85a390f6a
-
SHA256
88f43810c7041d90f9d7756d465f9131a042fdc1860139e31c3844a27badc6cc
-
SHA512
02ede41ce0dbeba8128ef3a796ad244bfe5ad06a642a25f2586801f082d72096f3abe4518a894388bf0d2f49db76242a4cfc67ab3db7eb9b7334af4ff81a3d31
-
SSDEEP
12288:HsJUwWfDfTn2RjQJzjzro0PeNV8p932ksM8IhKPBD/O/bl4l4uqnud/XJJC:HBwWzojNV8p931T8IkZzARk4u+uVT
Malware Config
Extracted
Family
darkgate
Botnet
vntricker
C2
http://66.42.63.27
Attributes
-
alternative_c2_port
8080
-
anti_analysis
false
-
anti_debug
false
-
anti_vm
false
-
c2_port
2351
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
true
-
crypter_dll
false
-
crypter_rawstub
false
-
crypto_key
zTxsssCaupvjtk
-
internal_mutex
dBcFaE
-
minimum_disk
100
-
minimum_ram
4096
-
ping_interval
4
-
rootkit
true
-
startup_persistence
true
-
username
vntricker