Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
darkgate
Botnet
admin888
C2
afdhf198jfadafdkfad.com
Attributes
-
anti_analysis
true
-
anti_debug
false
-
anti_vm
true
-
c2_port
80
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
false
-
crypter_dll
false
-
crypter_raw_stub
false
-
internal_mutex
lrDcZuOq
-
minimum_disk
50
-
minimum_ram
7000
-
ping_interval
6
-
rootkit
false
-
startup_persistence
true
-
username
admin888
Targets
-
-
Detect DarkGate stealer
-
Blocklisted process makes network request
-
Dave packer
Detects executable using a packer named 'Dave' by the community, based on a string at the end.
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE