General
-
Target
1760-14-0x00000000045A0000-0x0000000004963000-memory.dmp
-
Size
3.8MB
-
Sample
231011-n2lz2sfd43
-
MD5
c15893207b137712fe090adf6125b169
-
SHA1
fbd4f4e057ed63a3810226291ac60f31b20bdc0f
-
SHA256
bc84e91b86fcac694b207f3463fd1af3f20d204157d8feb1bb3d0b41ce5d4b88
-
SHA512
9074d8dc34c78944c1e173f9aff0dfee7b1d52df8cf690e59091f47a91ad3beb35cea1cf1d6738826af025affe42973a32ff6230021d26612d2bacc4abdfc76c
-
SSDEEP
12288:upEbhWFS4YpWn7vYyqJ8VZ1gzqxcJIugw7r8MX+GfC0qnuZ/caJC:uwhW0k7YyqJSvcJ1/ksdfC0+uZV
Malware Config
Extracted
Family
darkgate
Botnet
AA11
C2
http://94.228.169.143
Attributes
-
alternative_c2_port
8080
-
anti_analysis
true
-
anti_debug
true
-
anti_vm
false
-
c2_port
2351
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
true
-
crypter_dll
false
-
crypter_rawstub
false
-
crypto_key
QftsbpyrJeATQI
-
internal_mutex
txtMut
-
minimum_disk
100
-
minimum_ram
4096
-
ping_interval
4
-
rootkit
true
-
startup_persistence
true
-
username
AA11