darkgate | 89ad6083de9e791d0a5cf754f4a0a4f54a9e6e1a1b7d8d3dd4726da182c4be65 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

06032024_0...03.exe

windows7-x64

06032024_0...03.exe

windows10-2004-x64

Sharing

General

Target

06032024_0041_drkgate_0503.bin
Size

423KB
Sample

240305-t69vkacc92
MD5

2697586ee6b48d85ac2f45c9236dbb8f
SHA1

3a46a7d938b38580cf36089bb50c98dae7cf0304
SHA256

89ad6083de9e791d0a5cf754f4a0a4f54a9e6e1a1b7d8d3dd4726da182c4be65
SHA512

d93fdd6241f6998bea812ad08ab6d6b01ba419350c8d8085b2bb0958b967d8f4713fdb5ce1d603e14009c890a8a1222876b7e7eceae598d578308ea3a5c56da2
SSDEEP

6144:KKaalz2tR/S8aBgpfyS3l9QKp2PevGLAgnPXUoarrUEwmhcQ+/EThifATp4C:naal2Naqpfyuv9p2PeiKQEJ/+/E1iRC

Score

10^/10

darkgate admin888 stealer

Static task

static1

admin888 darkgate

3 signatures

Behavioral task

behavioral1

Sample

06032024_0041_drkgate_0503.exe

Resource

win7-20240220-en

darkgate admin888 stealer

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

06032024_0041_drkgate_0503.exe

Resource

win10v2004-20240226-en

darkgate admin888 stealer

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Extracted

Family

darkgate

Botnet

admin888

C2

afdhf198jfadafdkfad.com

Attributes

anti_analysis
true
anti_debug
false
anti_vm
true
c2_port
80
check_disk
false
check_ram
false
check_xeon
false
crypter_au3
false
crypter_dll
false
crypter_raw_stub
false
internal_mutex
lrDcZuOq
minimum_disk
50
minimum_ram
7000
ping_interval
6
rootkit
false
startup_persistence
true
username
admin888

Targets

- Target
  
  06032024_0041_drkgate_0503.bin
- Size
  
  423KB
- MD5
  
  2697586ee6b48d85ac2f45c9236dbb8f
- SHA1
  
  3a46a7d938b38580cf36089bb50c98dae7cf0304
- SHA256
  
  89ad6083de9e791d0a5cf754f4a0a4f54a9e6e1a1b7d8d3dd4726da182c4be65
- SHA512
  
  d93fdd6241f6998bea812ad08ab6d6b01ba419350c8d8085b2bb0958b967d8f4713fdb5ce1d603e14009c890a8a1222876b7e7eceae598d578308ea3a5c56da2
- SSDEEP
  
  6144:KKaalz2tR/S8aBgpfyS3l9QKp2PevGLAgnPXUoarrUEwmhcQ+/EThifATp4C:naal2Naqpfyuv9p2PeiKQEJ/+/E1iRC
Score

10^/10

darkgate admin888 stealer
- DarkGate
  DarkGate is an infostealer written in C++.
  stealer darkgate
- Detect DarkGate stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

admin888darkgate

behavioral1

darkgateadmin888stealer

behavioral2

darkgateadmin888stealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.