Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

darkgate/0...20.exe

windows7-x64

10

darkgate/0...20.exe

windows10-2004-x64

10

darkgate/0...24.exe

windows7-x64

1

darkgate/0...24.exe

windows10-2004-x64

3

darkgate/0...d2.exe

windows7-x64

10

darkgate/0...d2.exe

windows10-2004-x64

10

darkgate/0...bf.exe

windows7-x64

10

darkgate/0...bf.exe

windows10-2004-x64

10

darkgate/0...49.exe

windows7-x64

10

darkgate/0...49.exe

windows10-2004-x64

10

darkgate/0...fd.exe

windows7-x64

1

darkgate/0...fd.exe

windows10-2004-x64

1

darkgate/0...8f.exe

windows7-x64

darkgate/0...8f.exe

windows10-2004-x64

darkgate/0...be.exe

windows7-x64

10

darkgate/0...be.exe

windows10-2004-x64

10

darkgate/1...bb.exe

windows7-x64

10

darkgate/1...bb.exe

windows10-2004-x64

10

darkgate/1...ac.exe

windows7-x64

1

darkgate/1...ac.exe

windows10-2004-x64

3

darkgate/1...e6.exe

windows7-x64

1

darkgate/1...e6.exe

windows10-2004-x64

3

darkgate/1...50.exe

windows7-x64

1

darkgate/1...50.exe

windows10-2004-x64

1

darkgate/1...de.exe

windows7-x64

darkgate/1...de.exe

windows10-2004-x64

darkgate/1...e4.exe

windows7-x64

10

darkgate/1...e4.exe

windows10-2004-x64

10

darkgate/1...f2.exe

windows7-x64

1

darkgate/1...f2.exe

windows10-2004-x64

3

darkgate/1...90.exe

windows7-x64

10

darkgate/1...90.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23/10/2024, 15:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    darkgate/14f5e6c5c7e02acf97a44e476850c5c3df08057f6b93a5aae298d98e6a4dcfe4.exe

  • Size

    474KB

  • MD5

    b8fb11ff8d082eac7c53b88d8ee2cbcd

  • SHA1

    7b868f47df830bbaaaedf2d8afbc7e4845dd23f6

  • SHA256

    14f5e6c5c7e02acf97a44e476850c5c3df08057f6b93a5aae298d98e6a4dcfe4

  • SHA512

    34d183755ec5d648937c0bde61875ea790587e018d8b56cd3e6807f0ba0e032e6c6517b11c0a383a913c02e440ec9daf4de77452d20ee194b2b38ee44edcc77d

  • SSDEEP

    12288:+722AOFW/xShLEs447yHQjHt5Ht9RR0leqMk8fpQ2eazqnuI/QL:+aqFW5SEs447y8t5N9j0gqMDu2D+umc

Score
10/10
darkgatestealer

Malware Config

Signatures

  • DarkGate

    DarkGate is an infostealer written in C++.

    stealerdarkgate
  • Detect DarkGate stealer 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\darkgate\14f5e6c5c7e02acf97a44e476850c5c3df08057f6b93a5aae298d98e6a4dcfe4.exe
    "C:\Users\Admin\AppData\Local\Temp\darkgate\14f5e6c5c7e02acf97a44e476850c5c3df08057f6b93a5aae298d98e6a4dcfe4.exe"
    1⤵
      PID:1820

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1820-0-0x0000000000400000-0x000000000047E000-memory.dmp

      Filesize

      504KB

      Download