Overview

overview

10

Static

static

3

dark_drop.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dark_drop.exe

  • Size

    1.4MB

  • Sample

    240329-q6m41shh8s

  • MD5

    3f8f1fed248e0ad07041f2fa90035d23

  • SHA1

    ed4a5bc659d5195f8be5940e1bc017615cfc4281

  • SHA256

    1c22852eab3c6aa02f521dac087273f49143b802e2630eed1092488a59be8616

  • SHA512

    d64e4d9c26b2dbba321e72daaaa4df85017f4a17aec29365251c37ba12a3cbdf962aeabc7de136f4b68a6afb06d99f7bdb9ad3d644950eeecc4477cd259d7c36

  • SSDEEP

    24576:xjT3E53Myyzl0hMf1tr7Caw8M0tIjsS1jDmLoeO69p:xX3EZpBh211Waw306QS1nmp

Score
10/10
darkgatekaitoshiba123stealer

Malware Config

Extracted

Family

darkgate

Botnet

kaitoshiba123

C2

45.63.52.184

Attributes
  • anti_analysis

    true

  • anti_debug

    false

  • anti_vm

    true

  • c2_port

    8094

  • check_disk

    false

  • check_ram

    false

  • check_xeon

    false

  • crypter_au3

    false

  • crypter_dll

    false

  • crypter_raw_stub

    false

  • internal_mutex

    xNahGBDI

  • minimum_disk

    100

  • minimum_ram

    4096

  • ping_interval

    6

  • rootkit

    false

  • startup_persistence

    true

  • username

    kaitoshiba123

Targets

    • Target

      dark_drop.exe

    • Size

      1.4MB

    • MD5

      3f8f1fed248e0ad07041f2fa90035d23

    • SHA1

      ed4a5bc659d5195f8be5940e1bc017615cfc4281

    • SHA256

      1c22852eab3c6aa02f521dac087273f49143b802e2630eed1092488a59be8616

    • SHA512

      d64e4d9c26b2dbba321e72daaaa4df85017f4a17aec29365251c37ba12a3cbdf962aeabc7de136f4b68a6afb06d99f7bdb9ad3d644950eeecc4477cd259d7c36

    • SSDEEP

      24576:xjT3E53Myyzl0hMf1tr7Caw8M0tIjsS1jDmLoeO69p:xX3EZpBh211Waw306QS1nmp

    Score
    10/10
    darkgatekaitoshiba123stealer

    • DarkGate

      DarkGate is an infostealer written in C++.

      stealerdarkgate

    • Detect DarkGate stealer

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks