General
-
Target
7de5824801f0fabc76c2e2d0db948821e96e41dd2d28fe70add38ea954889ace
-
Size
219KB
-
Sample
240417-qccfesaa9w
-
MD5
e6627451103d05faddd0a7daacf1c1c4
-
SHA1
1abdf600eb84245b801c30cf9a7f427786829dd5
-
SHA256
7de5824801f0fabc76c2e2d0db948821e96e41dd2d28fe70add38ea954889ace
-
SHA512
366e713f9c4b10d26c905dd3091a5c6be797d6a66bdf21ddd61081da4964ce34d33cdd5180f15244fd99a4933f1e87742d469fb8a87b2d18d3e1afd20d5ca961
-
SSDEEP
6144:1xDc/XA3XpBjTWH9e9VStxwYQ4JuzowPIr:j4/QHppTWH9AstDQ4Ju0wPi
Behavioral task
behavioral1
Sample
82278c23c97dd24a08c5a1300f2a2cfc293824e0d4b178f340962cd722941e6b.exe
Resource
win7-20240221-en
Malware Config
Extracted
darkgate
admin888
diveupdown.com
-
anti_analysis
true
-
anti_debug
false
-
anti_vm
true
-
c2_port
80
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
false
-
crypter_dll
false
-
crypter_raw_stub
false
-
internal_mutex
VfiPBBhr
-
minimum_disk
50
-
minimum_ram
4000
-
ping_interval
6
-
rootkit
false
-
startup_persistence
true
-
username
admin888
Targets
-
-
Target
82278c23c97dd24a08c5a1300f2a2cfc293824e0d4b178f340962cd722941e6b.exe
-
Size
455KB
-
MD5
609b505e9f75649583e3c0b78a76aa26
-
SHA1
3d6ed8f14d55ad1a2a38016a56d3fa102a70c32b
-
SHA256
82278c23c97dd24a08c5a1300f2a2cfc293824e0d4b178f340962cd722941e6b
-
SHA512
7433115720dc0b08ebf7a68eadfd4c4c4b03b6518377c1490f100ffff199978bccdc266ae410ed4183d31eb85195ad7c301887a2f6718d2601e6ad8300134b7a
-
SSDEEP
12288:FtkKpKF2q1F3WbaPio/TKvJzghvOXK7BO/T:FtZA1F3WbaPio/OvJ09VUb
-
Detect DarkGate stealer
-