General

  • Target

    independert.msi

  • Size

    4.0MB

  • Sample

    240208-ck246aca76

  • MD5

    484bea10f5d2a0c4bdfa342e133033c6

  • SHA1

    6860971d489198df13c64a295999ba3cc7c9c654

  • SHA256

    846f339f39e82f358fe5d0985afde119563754c9a8030dc237eac1a963a8bbf4

  • SHA512

    ce74de9217edd30ad96e00dea9ac8783284c26f93e7271f45e406880b46dbdcf8d71feafa26881d069b8b20b62e66e4a0fc3ccd428512fa45af319663720f20e

  • SSDEEP

    49152:bpUPCczdSZ4Yx87nxODZGMFLnd8q67DZQlXvAoxS1mvXpiIg7W:bpSBx7nxOtFjOq67DcO1mh

Malware Config

Targets

    • Target

      independert.msi

    • Size

      4.0MB

    • MD5

      484bea10f5d2a0c4bdfa342e133033c6

    • SHA1

      6860971d489198df13c64a295999ba3cc7c9c654

    • SHA256

      846f339f39e82f358fe5d0985afde119563754c9a8030dc237eac1a963a8bbf4

    • SHA512

      ce74de9217edd30ad96e00dea9ac8783284c26f93e7271f45e406880b46dbdcf8d71feafa26881d069b8b20b62e66e4a0fc3ccd428512fa45af319663720f20e

    • SSDEEP

      49152:bpUPCczdSZ4Yx87nxODZGMFLnd8q67DZQlXvAoxS1mvXpiIg7W:bpSBx7nxOtFjOq67DcO1mh

    • DarkGate

      DarkGate is an infostealer written in C++.

    • Detect DarkGate stealer

    • Modifies file permissions

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks