Overview

overview

10

Static

static

10

DarkGate_Loader.exe

windows7-x64

9

DarkGate_Loader.exe

windows10-1703-x64

9

DarkGate_Loader.exe

windows10-2004-x64

9

DarkGate_Loader.exe

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    Builder.Win32.DarkGateLoader.a.7z

  • Size

    23.5MB

  • MD5

    2285c31f5fcb13bb388ec0346f60379d

  • SHA1

    aea53c6d2ba86bf7c531112dfe68753d0b381226

  • SHA256

    9ffcd4def60b263f9e4ed345ac6c47aa5d7660802c5f58ab64137946c8d3d4da

  • SHA512

    f318ad799775af7c19340d392ec8b38e9c06edd2ac709a843ee7f8701b4e4c4ecc82130cca9f9b9be2eb676d994e7112f3d1d10644bee25e0efdf8b215bbc11d

  • SSDEEP

    393216:Y98cD05pLCi0+rBt9esL5xgmHU3vSQVqQRgSbodT/7Q8lTysPXpeSD45w1Lx6zTA:mTepCwBbLwZfdVqQRgSboFM8xy+ed5wh

Score
10/10
upx

Malware Config

Signatures

  • Nirsoft 1 IoCs
  • NirSoft MailPassView 1 IoCs

    Password recovery tool for various email clients

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Builder.Win32.DarkGateLoader.a.7z
    .7z

    Password: infected

  • DarkGate_Loader.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections