MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1c4d704dcf8a341a8a6129743b1eb84681d53c4459cdb62fe2954e41adfed961. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1c4d704dcf8a341a8a6129743b1eb84681d53c4459cdb62fe2954e41adfed961
SHA3-384 hash:	86cb2d4c1c6bb636f1fc8f293a44e6f2c9d9c0ddcd2baf9a57cca38993765a49c1291e8e63fb09beaecf72cc92b00cbe
SHA1 hash:	127f6bc9b9a42bf7036c3f39d66c87d32cddeaa2
MD5 hash:	334f3fd6c9fe35fa7d5e7d2780d636ee
humanhash:	april-july-carolina-moon
File name:	script.ahk
Download:	download sample
Signature	DarkGate Alert Create hunting rule
File size:	441 bytes
First seen:	2024-04-16 18:04:04 UTC
Last seen:	Never
File type:	unknown
MIME type:	text/plain
ssdeep	6:8kYWQxcpC1ogdG+GbBWcQdSIurioqqu3DHzJsaum8rkwHYF6DtGy1xk5QQNP0Pa8:LQxcpCeY0Ojo1uLdsa7e4YD/ktVsKVnw
TLSH	T1A7F0F12B09DB019886E2A4C8FB9634509CDBE946ED7D929838C244DC4A8DB125CF4DEC
Reporter	NDA0
Tags:	AHK AutoHotkey DarkGate

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

183

Origin country :

NL

Vendor Threat Intelligence

FileScan.IO No Threat

Verdict:

No Threat

Threat level:

  2.5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/661ebdd73137a4e0f3b9cb21/reports/af226b6a-fe1a-44d9-a844-c2e6f7b9f604/overview

Hybrid Analysis Trojan.PS.DarkGate

Verdict:

Suspicious

Labled as:

Trojan.PS.DarkGate

Link:

https://www.hybrid-analysis.com/sample/1c4d704dcf8a341a8a6129743b1eb84681d53c4459cdb62fe2954e41adfed961

Nucleon Malprob Benign

Score:

6%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/1c4d704dcf8a341a8a6129743b1eb84681d53c4459cdb62fe2954e41adfed961

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1c4d704dcf8a341a8a6129743b1eb84681d53c4459cdb62fe2954e41adfed961/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=drgxatopri2bvctbff2dwhvyi2a5kpcelhg3ml7csvhedlp63fqq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI DarkGate

Threat name:

DarkGate

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/1c4d704dcf8a341a8a6129743b1eb84681d53c4459cdb62fe2954e41adfed961