General
-
Target
752-34-0x0000000004B50000-0x0000000004CE5000-memory.dmp
-
Size
1.6MB
-
Sample
231113-qg27mscg7y
-
MD5
aa27adfba15ca50b1b47827e19a1cf0a
-
SHA1
50943df63efc66afe3099df8f737fb9b26833335
-
SHA256
eb42bd0cb7bebff9d33b814d37775304c8578982adc4c91308da15fced85682d
-
SHA512
c91eff1951a2cbeea3fdc4e6d7a0b1f5f688259486173937906edfcb9d378dbe1da7fedd70b289a6d8b950b08a227e4d40c7102e559633edfd6a54215bff2db9
-
SSDEEP
12288:G/K3ISU6pSiR7WlVkJMazt8GO8IBe+r1UtNW0c:GOj7W7kJMazt8GOHBeykRc
Score
10/10
Malware Config
Extracted
Family
darkgate
Botnet
user_871236672
C2
http://8sjimonstersboonkonline.com
Attributes
-
alternative_c2_port
8080
-
anti_analysis
true
-
anti_debug
true
-
anti_vm
true
-
c2_port
2351
-
check_disk
false
-
check_ram
true
-
check_xeon
false
-
crypter_au3
false
-
crypter_dll
false
-
crypter_rawstub
true
-
crypto_key
gBVVzQVruhpqkv
-
internal_mutex
txtMut
-
minimum_disk
43
-
minimum_ram
7000
-
ping_interval
4
-
rootkit
true
-
startup_persistence
true
-
username
user_871236672