General
-
Target
74019cf8562c516c372e09ce02de7355.bin
-
Size
2.2MB
-
Sample
240307-cmfnyadb94
-
MD5
15b129253d6766a48ea4f8e11f5170bf
-
SHA1
afb13f6e1a4d7e3c8d7bd50fed54f728f161bcf0
-
SHA256
e52292556e3d7855bbd835f9e59801fb7c5bb6b49e90a6e441b23aa58a6165c4
-
SHA512
48568ed01b686885239b2da5e8d608b6bcce4da6c43703850d38254a4b1ffb8ce7398cebfbc3214950f90afad022d1a97c0bfc98a5e9a1e48f8b2491db8ab7cf
-
SSDEEP
49152:z0wl2KhktK7NHcjDUkPuoTBgMLVlwP8eTpNCqu79QVMM9Zi0yvI04tIvCu8t:DlthkC6EkPJTBgslwP86pNCqz43I0AXT
Behavioral task
behavioral1
Sample
8a2edeef9978d454882bfb233d9cd77505618b854f7899b27aeb095ff8ebb3f4.exe
Resource
win7-20240215-en
Malware Config
Extracted
darkgate
admin888
afdhf198jfadafdkfad.com
-
anti_analysis
true
-
anti_debug
false
-
anti_vm
true
-
c2_port
80
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
false
-
crypter_dll
false
-
crypter_raw_stub
false
-
internal_mutex
lrDcZuOq
-
minimum_disk
50
-
minimum_ram
7000
-
ping_interval
6
-
rootkit
false
-
startup_persistence
true
-
username
admin888
Targets
-
-
Target
8a2edeef9978d454882bfb233d9cd77505618b854f7899b27aeb095ff8ebb3f4.exe
-
Size
4.2MB
-
MD5
74019cf8562c516c372e09ce02de7355
-
SHA1
3ce6f711cd1ad954b96cb98055a3a40dae8c9a65
-
SHA256
8a2edeef9978d454882bfb233d9cd77505618b854f7899b27aeb095ff8ebb3f4
-
SHA512
7b41d9a1387ebdded1833a655166ffb2cd43b0eb490c5899bf72355a5e2e371b2d0be2231c5252b8fb2a569c92884e8a3391163207fdcb74e66edebcf5cfc771
-
SSDEEP
49152:1qCI3jRuBrxpU4hEZ/qCOyHcRdzFqivZaFChW7ZapGC8FXw+aPwEFtS5/BEc74fu:8CSsrxpU4hE1qCOeNiTGC89aZS2L
-
Detect DarkGate stealer
-
Executes dropped EXE
-
Loads dropped DLL
-