Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

16032024_0...03.exe

windows7-x64

10

16032024_0...03.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16032024_0229_drkgate_1503.bin

  • Size

    452KB

  • MD5

    3869b13da90445162c8ab493699078a6

  • SHA1

    6f13173170d1050fd28a1cae37834e57733164de

  • SHA256

    d68de20c720427d99aa6ac253402c66ae9904fb667956c98ab9e36fe34a59635

  • SHA512

    718b862eb95cd2ffa1c33900339503bb98d552ff30fbc34080bb81662c9a94b2f6cff91e149308173d1bac87f47671cc8c4b33af37b2d27f218d3ad241d3975b

  • SSDEEP

    12288:FtkKpKF2q1F3WbaPio/TKvJzghvOXK7BO/:FtZA1F3WbaPio/OvJ09VU

Score
10/10
admin888darkgate

Malware Config

Extracted

Family

darkgate

Botnet

admin888

C2

diveupdown.com

Attributes
  • anti_analysis

    true

  • anti_debug

    false

  • anti_vm

    true

  • c2_port

    80

  • check_disk

    false

  • check_ram

    false

  • check_xeon

    false

  • crypter_au3

    false

  • crypter_dll

    false

  • crypter_raw_stub

    false

  • internal_mutex

    VfiPBBhr

  • minimum_disk

    50

  • minimum_ram

    4000

  • ping_interval

    6

  • rootkit

    false

  • startup_persistence

    true

  • username

    admin888

Signatures

  • Darkgate family
    darkgate
  • Detect DarkGate stealer 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 16032024_0229_drkgate_1503.bin
    .exe windows:4 windows x86 arch:x86

    Password: infected


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.