Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2332-125-0x00000000032E0000-0x00000000036A3000-memory.dmp

  • Size

    3.8MB

  • MD5

    cb9514395e094766cef0df501b3e7c0d

  • SHA1

    9f703904f8a0db30395324ba3861d8b1a5949a78

  • SHA256

    2ff9df5aa85da577ac6bb678f36a1c5a2706c610ee637c4ebb9d23f5d810e1a3

  • SHA512

    9d2d5bb1ae80adc1b9174847cba9f4ad62fbf6971ba3ae0df1534c2925648dd8d02067138c6800053cd7de2223f2b01f6b8180e7bec15a1ffcd1080ec4e9c7c9

  • SSDEEP

    24576:rtcWws4TxtkF1xW4BKduD0xH49HoAh+uFP:rtujbwlgxH4Zgi

Score
10/10
aa11darkgate

Malware Config

Extracted

Family

darkgate

Botnet

AA11

C2

http://94.228.169.143

Attributes
  • alternative_c2_port

    8080

  • anti_analysis

    true

  • anti_debug

    true

  • anti_vm

    false

  • c2_port

    2351

  • check_disk

    false

  • check_ram

    false

  • check_xeon

    false

  • crypter_au3

    true

  • crypter_dll

    false

  • crypter_rawstub

    false

  • crypto_key

    bABouSDRyBocvj

  • internal_mutex

    txtMut

  • minimum_disk

    100

  • minimum_ram

    4096

  • ping_interval

    4

  • rootkit

    true

  • startup_persistence

    true

  • username

    AA11

Signatures

Files

  • 2332-125-0x00000000032E0000-0x00000000036A3000-memory.dmp