Overview

overview

10

Static

static

10

2024-04-28...ck.exe

windows7-x64

10

2024-04-28...ck.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_f9895213b401a7ba00112c954b173cfa_darkgate_ransomlock

  • Size

    1.3MB

  • MD5

    f9895213b401a7ba00112c954b173cfa

  • SHA1

    3beefd2c4ecea2a0fb33bbe5a04f3c3efd44e7f2

  • SHA256

    849c08a491f9cbed4f9693c279c1012a838f1f115d64bc1babbce36c0b466333

  • SHA512

    b9029eee3a6d2df3ce7bfaff37e90f041f5d1b237c33f908d5dda35d0ca8eaa2dfd05de8aa30d3bcb7d98fc34c1204c71965426e7d7c07d7a3e66fe9a461c9c9

  • SSDEEP

    24576:HwxPanDWDAxfy+t4g6cBLi2iYQOlbQTAIUV:QxPpWTjPJplUTjUV

Score
10/10

Malware Config

Signatures

  • Detects executables containing artifacts associated with disabling Widnows Defender 1 IoCs
  • Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_f9895213b401a7ba00112c954b173cfa_darkgate_ransomlock
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections