General
-
Target
f90e30df61aec134fba71d66a87326c1.bin
-
Size
8.9MB
-
Sample
231025-c29kkaee3t
-
MD5
d48def6261a335348c0a4add2ba069ec
-
SHA1
4498c2dc1607babeb2d38cc3efabdda110e0194c
-
SHA256
1bd7036f51911d4551903813484daf2a6e99965acf21df3bdccf0cdf0d8cae5b
-
SHA512
94ebcf12745c22f4eadec9af9ce0505376063a37231d95d8b86417e9af217ef612a56d4cd39d2a1c34e22a42e1afa9f5c1e346c7b39d69a83c18c53720d145e3
-
SSDEEP
196608:RzsDOQFfAZ1RzKID1p2A4dPsDH6KvZJP4Oid1g:NsaIfAjEa1AA4iZ14OEg
Static task
static1
Behavioral task
behavioral1
Sample
567d828dab1022eda84f90592d6d95e331e0f2696e79ed7d86ddc095bb2efdc8.msi
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
567d828dab1022eda84f90592d6d95e331e0f2696e79ed7d86ddc095bb2efdc8.msi
Resource
win10v2004-20231020-en
Malware Config
Extracted
darkgate
user_871236672
http://voodmastrelinux.com
-
alternative_c2_port
8080
-
anti_analysis
true
-
anti_debug
true
-
anti_vm
true
-
c2_port
2351
-
check_disk
true
-
check_ram
true
-
check_xeon
true
-
crypter_au3
false
-
crypter_dll
false
-
crypter_rawstub
true
-
crypto_key
vBojMjKiOxwdob
-
internal_mutex
txtMut
-
minimum_disk
35
-
minimum_ram
6000
-
ping_interval
4
-
rootkit
true
-
startup_persistence
true
-
username
user_871236672
Targets
-
-
Target
567d828dab1022eda84f90592d6d95e331e0f2696e79ed7d86ddc095bb2efdc8.msi
-
Size
9.1MB
-
MD5
f90e30df61aec134fba71d66a87326c1
-
SHA1
593efb526ecc12d7020c35645cce6ad3a1774e6a
-
SHA256
567d828dab1022eda84f90592d6d95e331e0f2696e79ed7d86ddc095bb2efdc8
-
SHA512
cf377981323a1f87e421b3c4f42a4df9ddff7ba72ad0a0a7ad77e1835a68d748437252a83328a9503dec2208d63d0a9e56ee2ad2ff340a97b11377fb5a41648c
-
SSDEEP
196608:BhbWzPMCeNrs0rczeuNr/QnMOsaB9QVuHSzdUupBqbHSDjs6cvUOzZx:XbWzPM5HCZNrgMVw6wyZUupkjSPcvXx
Score10/10-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-