329db242a00f0dcf4e2f6390b06c837fd992cabb2cc4d0eda8278a8c57d4b044 | Triage™

Login
Reports

Overview

overview

Static

static

2023-10-12...-3.au3

windows7-x64

3

2023-10-12...-3.au3

windows10-2004-x64

3

2023-10-12...-3.au3

windows7-x64

3

2023-10-12...-3.au3

windows10-2004-x64

3

2023-10-12...-3.au3

windows7-x64

3

2023-10-12...-3.au3

windows10-2004-x64

3

2023-10-12...Cs.txt

windows7-x64

1

2023-10-12...Cs.txt

windows10-2004-x64

1

2023-10-12...pt.exe

windows7-x64

2023-10-12...pt.exe

windows10-2004-x64

2023-10-12...pt.bin

windows7-x64

3

2023-10-12...pt.bin

windows10-2004-x64

3

2023-10-12...-3.lnk

windows7-x64

3

2023-10-12...-3.lnk

windows10-2004-x64

8

2023-10-12...-3.lnk

windows7-x64

3

2023-10-12...-3.lnk

windows10-2004-x64

8

2023-10-12...-3.lnk

windows7-x64

3

2023-10-12...-3.lnk

windows10-2004-x64

8

Analysis

max time kernel
143s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
07/02/2024, 03:14

Sharing

Copy URL Twitter E-mail

Static task

static1

3 signatures

ricoc3 darkgate

Behavioral task

behavioral1

Sample

2023-10-12-AutoIt-script-file-for-DarkGate-example-1-of-3.au3

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

2023-10-12-AutoIt-script-file-for-DarkGate-example-1-of-3.au3

Resource

win10v2004-20231222-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

2023-10-12-AutoIt-script-file-for-DarkGate-example-2-of-3.au3

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral4

Sample

2023-10-12-AutoIt-script-file-for-DarkGate-example-2-of-3.au3

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

2023-10-12-AutoIt-script-file-for-DarkGate-example-3-of-3.au3

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

2023-10-12-AutoIt-script-file-for-DarkGate-example-3-of-3.au3

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

2023-10-12-DarkGate-IOCs.txt

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

2023-10-12-DarkGate-IOCs.txt

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

2023-10-12-decoded-EXE-retrieved-by-au3-script.exe

Resource

win7-20231215-en

windows7-x64

7 signatures

150 seconds

darkgate ricoc3 stealer

Behavioral task

behavioral10

Sample

2023-10-12-decoded-EXE-retrieved-by-au3-script.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

7 signatures

150 seconds

darkgate ricoc3 stealer

Behavioral task

behavioral11

Sample

2023-10-12-encoded-binary-retrieved-by-au3-script.bin

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

2023-10-12-encoded-binary-retrieved-by-au3-script.bin

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

2023-10-12-shortcut-for-DarkGate-example-1-of-3.lnk

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

2023-10-12-shortcut-for-DarkGate-example-1-of-3.lnk

Resource

win10v2004-20231222-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral15

Sample

2023-10-12-shortcut-for-DarkGate-example-2-of-3.lnk

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

2023-10-12-shortcut-for-DarkGate-example-2-of-3.lnk

Resource

win10v2004-20231222-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral17

Sample

2023-10-12-shortcut-for-DarkGate-example-3-of-3.lnk

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

2023-10-12-shortcut-for-DarkGate-example-3-of-3.lnk

Resource

win10v2004-20231215-en

windows10-2004-x64

6 signatures

150 seconds

Report Analysis Logs

General

Target
2023-10-12-DarkGate-IOCs.txt
Size 4KB
Sample240207-drfp6scbb6
SHA256 6dceda97bd6fca9f4b77f397883cc362562f618d90514e41fa360d53e838f607
MD5 92e3ec320e60e76b800de5899ee86915
SHA1 91e6e9876fb9ef8b7aa4d3a540abd1c108419b43
SHA512 224e538a03b4733b00628fdbc011888f2afaaded7f79636c760d46f46153a9a3c0eebee337e3002a5e49ce78dc265ffc83660218a1a843e584679463da3b3e67
SSDEEP 96:P4mEjI4DQCKliWc2O2FOOyuFOOykXE0YbnTVxDiJdfMwbZb:uHoiW/AhuAhkXDYz2dfnbZb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\2023-10-12-DarkGate-IOCs.txt
1⤵
PID:224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy