Overview

overview

10

Static

static

3

dark_drop.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dark_drop.exe

  • Size

    1.4MB

  • Sample

    240329-qy2bnsad84

  • MD5

    d6dde64d64bef5cebbc75e4b19704f88

  • SHA1

    b8081ae07380af61e6562ca6dba12dc98b9c06f6

  • SHA256

    bff6c1cc7b3b8e6b206390d9e7053defa98e20915793dd3989c6df0de3fa5252

  • SHA512

    aa079e4cf0a46a04389d5c174bc24e995f5398e5ccc4088ccda00a3a3657e536ce86a3fbf365f8758c0eb81e0db4f3344447e377380d5a29ca2a17d59c84d6b9

  • SSDEEP

    24576:GYT3E53Myyzl0hMf1tr7Caw8M09KW6AAUGIMVJ5/s:G23EZpBh211Waw309+UGIsT/

Score
10/10
darkgatekaitoshiba123stealer

Malware Config

Extracted

Family

darkgate

Botnet

kaitoshiba123

C2

45.63.52.184

Attributes
  • anti_analysis

    true

  • anti_debug

    false

  • anti_vm

    true

  • c2_port

    8094

  • check_disk

    false

  • check_ram

    false

  • check_xeon

    false

  • crypter_au3

    false

  • crypter_dll

    false

  • crypter_raw_stub

    false

  • internal_mutex

    bpEgCXsp

  • minimum_disk

    100

  • minimum_ram

    4096

  • ping_interval

    6

  • rootkit

    false

  • startup_persistence

    true

  • username

    kaitoshiba123

Targets

    • Target

      dark_drop.exe

    • Size

      1.4MB

    • MD5

      d6dde64d64bef5cebbc75e4b19704f88

    • SHA1

      b8081ae07380af61e6562ca6dba12dc98b9c06f6

    • SHA256

      bff6c1cc7b3b8e6b206390d9e7053defa98e20915793dd3989c6df0de3fa5252

    • SHA512

      aa079e4cf0a46a04389d5c174bc24e995f5398e5ccc4088ccda00a3a3657e536ce86a3fbf365f8758c0eb81e0db4f3344447e377380d5a29ca2a17d59c84d6b9

    • SSDEEP

      24576:GYT3E53Myyzl0hMf1tr7Caw8M09KW6AAUGIMVJ5/s:G23EZpBh211Waw309+UGIsT/

    Score
    10/10
    darkgatekaitoshiba123stealer

    • DarkGate

      DarkGate is an infostealer written in C++.

      stealerdarkgate

    • Detect DarkGate stealer

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks