General
-
Target
https://temp.sh/JYdCE/data.zip
-
Sample
240329-rgaytsah25
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://temp.sh/JYdCE/data.zip
Resource
win10v2004-20240226-en
windows10-2004-x64
11 signatures
300 seconds
Behavioral task
behavioral2
Sample
https://temp.sh/JYdCE/data.zip
Resource
win11-20240221-en
windows11-21h2-x64
12 signatures
300 seconds
Malware Config
Extracted
Family
darkgate
Botnet
kaitoshiba123
C2
45.63.52.184
Attributes
-
anti_analysis
true
-
anti_debug
false
-
anti_vm
true
-
c2_port
8094
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
false
-
crypter_dll
false
-
crypter_raw_stub
false
-
internal_mutex
EhuJByqk
-
minimum_disk
100
-
minimum_ram
4096
-
ping_interval
6
-
rootkit
false
-
startup_persistence
true
-
username
kaitoshiba123
Targets
-
-
Target
https://temp.sh/JYdCE/data.zip
Score10/10-
Detect DarkGate stealer
-
Executes dropped EXE
-