General
-
Target
YandexDiskSetup.exe
-
Size
452KB
-
Sample
240703-wn6fjasgqg
-
MD5
25ed057b593437e3a2d37d1630466b3a
-
SHA1
afae52a614177748d9f02ab86fb32a8b7683c415
-
SHA256
91f055060bca30ecb08b0fb0694c84ff5d9eb31d52ad69c1d8db10f9c275028b
-
SHA512
85a54d6cb7dc1379bd27fef7fded2b820479351a953c21eb7fdf2ae3ad07c7cc8e7816b8a62bf2e149efa76297d492716f415d80ea7805d468647f680980b9d0
-
SSDEEP
6144:vOiqnbxgv3XaTigkrlzztlbZcezduMnYu5+yV9vK18oacQOEqPXzVCvErxGQp:mPnbI3qegkZtlbZcezduMnYu7dOZrVC
Behavioral task
behavioral1
Sample
YandexDiskSetup.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
YandexDiskSetup.exe
Resource
win10-20240404-en
Malware Config
Extracted
darkgate
trafikk897612561
91.222.173.204
-
anti_analysis
true
-
anti_debug
false
-
anti_vm
true
-
c2_port
80
-
check_disk
false
-
check_ram
false
-
check_xeon
false
-
crypter_au3
false
-
crypter_dll
false
-
crypter_raw_stub
false
-
internal_mutex
WRYOnwPR
-
minimum_disk
100
-
minimum_ram
4095
-
ping_interval
6
-
rootkit
false
-
startup_persistence
true
-
username
trafikk897612561
Targets
-
-
Target
YandexDiskSetup.exe
-
Size
452KB
-
MD5
25ed057b593437e3a2d37d1630466b3a
-
SHA1
afae52a614177748d9f02ab86fb32a8b7683c415
-
SHA256
91f055060bca30ecb08b0fb0694c84ff5d9eb31d52ad69c1d8db10f9c275028b
-
SHA512
85a54d6cb7dc1379bd27fef7fded2b820479351a953c21eb7fdf2ae3ad07c7cc8e7816b8a62bf2e149efa76297d492716f415d80ea7805d468647f680980b9d0
-
SSDEEP
6144:vOiqnbxgv3XaTigkrlzztlbZcezduMnYu5+yV9vK18oacQOEqPXzVCvErxGQp:mPnbI3qegkZtlbZcezduMnYu7dOZrVC
Score10/10-
Detect DarkGate stealer
-