General
-
Target
1688-31-0x0000000004420000-0x00000000045B5000-memory.dmp
-
Size
1.6MB
-
Sample
231111-17ejdace73
-
MD5
4804de909616b06a3bef781d970452ae
-
SHA1
cb7bba92ead01e08c03543fb59355e738d70f8c7
-
SHA256
54e25ca3e3febf00d843744a72852c00334963e6695cc012587f7a66dfcd28ad
-
SHA512
c31bb06da2a542e75fb3087d150c385427f13d9d9c7ed035a76d526a8dc92a4b3887d00e849bb0c623bf59e4c573903aab9ca220694ed025788d4517715ff68f
-
SSDEEP
6144:TpGPzmXZWi7nu33/c/jUFWkf99EVnOVIZ65M4PCbsvWEH:lGbmJWT33/c/jUFNqOVIZ6y4PCbsh
Score
10/10
Malware Config
Extracted
Family
darkgate
Botnet
user_871236672
C2
http://shsukadadyuikmmonk.com
Attributes
-
alternative_c2_port
8080
-
anti_analysis
true
-
anti_debug
true
-
anti_vm
true
-
c2_port
2351
-
check_disk
true
-
check_ram
true
-
check_xeon
true
-
crypter_au3
false
-
crypter_dll
false
-
crypter_rawstub
true
-
crypto_key
WccksaEfoXLLtV
-
internal_mutex
txtMut
-
minimum_disk
50
-
minimum_ram
6001
-
ping_interval
4
-
rootkit
true
-
startup_persistence
true
-
username
user_871236672