Extracted

• • Target

    http://www.google.com

  Score

  10^/10

  darkgatedrk2discoveryexecutionpersistencestealer

  • DarkGate

    DarkGate is an infostealer written in C++.

    stealerdarkgate

  • Darkgate family

    darkgate

  • Detect DarkGate stealer

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Blocklisted process makes network request

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Command and Scripting Interpreter: AutoIT

    Using AutoIT for possible automate script.

    execution
  behavioral1