General
-
Target
1139c2997698f93629c269abadd593ecdfb6b58d180b1acad9ecb2c35783adbf
-
Size
218KB
-
Sample
240417-qbrtqaaa7w
-
MD5
f6530ea087764dc5a82b5801b8b1b305
-
SHA1
4a1bf329eddce0d3a524523f143093a181c8e4c2
-
SHA256
1139c2997698f93629c269abadd593ecdfb6b58d180b1acad9ecb2c35783adbf
-
SHA512
b54c04f3b20dd8db68953df3aaa6223dd7c484f6c6c8215206fc955f1ef8b51d483c8c0f9bf974fcc8a5397ec4d39ee5f9ab4b5ab0986a8b75343d6c1628f289
-
SSDEEP
6144:ZNZOc6pk/SFCNh/H2Bf8EhjhLzaU5Rz3Zspl:Mk6FCxElhLzaUJs
Behavioral task
behavioral1
Sample
3c64cbb7e7212d920322dae62665b05ceb63a0ad6074cac3ba518cedc5c6dd48.exe
Resource
win7-20231129-en
Malware Config
Extracted
darkgate
admin8888
buassinnndm.net
-
anti_analysis
true
-
anti_debug
false
-
anti_vm
true
-
c2_port
80
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
false
-
crypter_dll
false
-
crypter_raw_stub
false
-
internal_mutex
losBHUAX
-
minimum_disk
100
-
minimum_ram
4096
-
ping_interval
6
-
rootkit
false
-
startup_persistence
true
-
username
admin8888
Targets
-
-
Target
3c64cbb7e7212d920322dae62665b05ceb63a0ad6074cac3ba518cedc5c6dd48.exe
-
Size
454KB
-
MD5
2143d7603258b2801f7ed154b5da3da6
-
SHA1
5e9c26503ebac94a83b78a03057237ccce365a50
-
SHA256
3c64cbb7e7212d920322dae62665b05ceb63a0ad6074cac3ba518cedc5c6dd48
-
SHA512
061bdda42dd16812ae1ced3b4c9a9e99b600c7593f74397e4296e4b86386353fb8a0adfa8831d1c8f3fd98a7aa3550125f84ab88307808cdd50215ac210b9ebd
-
SSDEEP
12288:FtkKpKF2q1F3WbaPio/TKvJzghvOXK7BOYV:FtZA1F3WbaPio/OvJ09VUe
-
Detect DarkGate stealer
-