General
-
Target
15052024_0154_darkgate_1405.bin
-
Size
451KB
-
Sample
240515-cb16hacb56
-
MD5
a21b38b6116513bc2253e8bf86489ee4
-
SHA1
a1cf45cdc155d0c94548a49637f1e188898f87c7
-
SHA256
2466bd396fd49893a75de0042a43540e31382209d5dda5bb90983e0a4a6bca1f
-
SHA512
b7e344a5c2305c436c65d7285fdadca9eb62d07507419dc03c10cb1fcfbce75cba70fbf2cf3e34293c94fb2be63b0f7206c1e868e01f53305f1e2392a6fdd93a
-
SSDEEP
6144:COmtIXI7JMzHXaTigc2cNAjnypbreedTLvOh6oacTjMwQdV9U8OFCGQBe:7moI7gHqegc2GAjIveehYM/5U8C
Behavioral task
behavioral1
Sample
15052024_0154_darkgate_1405.exe
Resource
win7-20240220-en
Malware Config
Extracted
darkgate
admin888
flexiblemaria.com
-
anti_analysis
true
-
anti_debug
false
-
anti_vm
true
-
c2_port
80
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
false
-
crypter_dll
false
-
crypter_raw_stub
false
-
internal_mutex
rZyBgHHD
-
minimum_disk
100
-
minimum_ram
4096
-
ping_interval
6
-
rootkit
false
-
startup_persistence
true
-
username
admin888
Targets
-
-
Target
15052024_0154_darkgate_1405.bin
-
Size
451KB
-
MD5
a21b38b6116513bc2253e8bf86489ee4
-
SHA1
a1cf45cdc155d0c94548a49637f1e188898f87c7
-
SHA256
2466bd396fd49893a75de0042a43540e31382209d5dda5bb90983e0a4a6bca1f
-
SHA512
b7e344a5c2305c436c65d7285fdadca9eb62d07507419dc03c10cb1fcfbce75cba70fbf2cf3e34293c94fb2be63b0f7206c1e868e01f53305f1e2392a6fdd93a
-
SSDEEP
6144:COmtIXI7JMzHXaTigc2cNAjnypbreedTLvOh6oacTjMwQdV9U8OFCGQBe:7moI7gHqegc2GAjIveehYM/5U8C
-
Detect DarkGate stealer
-