Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
16032024_0229_drkgate_1503.bin
-
Size
452KB
-
Sample
240315-w43pkshg72
-
MD5
3869b13da90445162c8ab493699078a6
-
SHA1
6f13173170d1050fd28a1cae37834e57733164de
-
SHA256
d68de20c720427d99aa6ac253402c66ae9904fb667956c98ab9e36fe34a59635
-
SHA512
718b862eb95cd2ffa1c33900339503bb98d552ff30fbc34080bb81662c9a94b2f6cff91e149308173d1bac87f47671cc8c4b33af37b2d27f218d3ad241d3975b
-
SSDEEP
12288:FtkKpKF2q1F3WbaPio/TKvJzghvOXK7BO/:FtZA1F3WbaPio/OvJ09VU
Behavioral task
behavioral1
Sample
16032024_0229_drkgate_1503.exe
Resource
win7-20240221-en
Malware Config
Extracted
darkgate
admin888
diveupdown.com
-
anti_analysis
true
-
anti_debug
false
-
anti_vm
true
-
c2_port
80
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
false
-
crypter_dll
false
-
crypter_raw_stub
false
-
internal_mutex
VfiPBBhr
-
minimum_disk
50
-
minimum_ram
4000
-
ping_interval
6
-
rootkit
false
-
startup_persistence
true
-
username
admin888
Targets
-
-
Target
16032024_0229_drkgate_1503.bin
-
Size
452KB
-
MD5
3869b13da90445162c8ab493699078a6
-
SHA1
6f13173170d1050fd28a1cae37834e57733164de
-
SHA256
d68de20c720427d99aa6ac253402c66ae9904fb667956c98ab9e36fe34a59635
-
SHA512
718b862eb95cd2ffa1c33900339503bb98d552ff30fbc34080bb81662c9a94b2f6cff91e149308173d1bac87f47671cc8c4b33af37b2d27f218d3ad241d3975b
-
SSDEEP
12288:FtkKpKF2q1F3WbaPio/TKvJzghvOXK7BO/:FtZA1F3WbaPio/OvJ09VU
-
Detect DarkGate stealer
-