General
-
Target
umkglnks.ps1
-
Size
246B
-
Sample
240514-ytkr5adh7v
-
MD5
f2e4351aa516a1f2e59ade5d9e7aa1d6
-
SHA1
1b751a2ee3af91c4cdf020914de19169fceb51ac
-
SHA256
e9ad648589aa3e15ce61c6a3be4fc98429581be738792ed17a713b4980c9a4a2
-
SHA512
ffc8ff99ea34d87efb5b869b1bc45acb5dd4557806afee79cdc32dc4fee66077ff4809d0918d266458c65044fc2516e8cd9aeac11a2a98128514de676d0a8e5c
Static task
static1
Behavioral task
behavioral1
Sample
umkglnks.ps1
Resource
win7-20231129-en
Malware Config
Extracted
darkgate
admin888
flexiblemaria.com
-
anti_analysis
true
-
anti_debug
false
-
anti_vm
true
-
c2_port
80
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
false
-
crypter_dll
false
-
crypter_raw_stub
false
-
internal_mutex
rZyBgHHD
-
minimum_disk
100
-
minimum_ram
4096
-
ping_interval
6
-
rootkit
false
-
startup_persistence
true
-
username
admin888
Targets
-
-
Target
umkglnks.ps1
-
Size
246B
-
MD5
f2e4351aa516a1f2e59ade5d9e7aa1d6
-
SHA1
1b751a2ee3af91c4cdf020914de19169fceb51ac
-
SHA256
e9ad648589aa3e15ce61c6a3be4fc98429581be738792ed17a713b4980c9a4a2
-
SHA512
ffc8ff99ea34d87efb5b869b1bc45acb5dd4557806afee79cdc32dc4fee66077ff4809d0918d266458c65044fc2516e8cd9aeac11a2a98128514de676d0a8e5c
-
Detect DarkGate stealer
-
Blocklisted process makes network request
-
Executes dropped EXE
-