MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4aea930309b590d34488187a8c9cb31b83ff1faa2ff4d27606e50fac3a0db742. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4aea930309b590d34488187a8c9cb31b83ff1faa2ff4d27606e50fac3a0db742
SHA3-384 hash:	0d526b3aca3c78e72075e27e26db56cdb05f6a4e35d710beeefc35cafefacb801a692290f894d0277eb89f4f2604349b
SHA1 hash:	a2deca1c9c48e0402d34ab9b66b63a335e827bf1
MD5 hash:	7d00d7b1509350ef42de43b28a2efeec
humanhash:	south-black-queen-mango
File name:	cztngt
Download:	download sample
Signature	DarkGate Alert Create hunting rule
File size:	87'109 bytes
First seen:	2023-10-09 12:43:14 UTC
Last seen:	Never
File type:
MIME type:	application/octet-stream
ssdeep	1536:ObsyhmZBmmBoc/IQSVdqR1yFN2VNNcCWq8Ixqm053JjPOIM6DYDSJrjFWivdyE+m:T71BxwXvmYI+q8SqNPOIM6DYyr7dydjM
TLSH	T1D983027F50EE1E0A684BE3DEB686B5D6895BD07016E640388AC84F0FCD4EEB4D944837
Reporter	Mangusta
Tags:	au3 DarkGate piret-wismann-com

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

164

Origin country :

IT

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Trojan.Generic

Verdict:

Suspicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/4aea930309b590d34488187a8c9cb31b83ff1faa2ff4d27606e50fac3a0db742

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4aea930309b590d34488187a8c9cb31b83ff1faa2ff4d27606e50fac3a0db742/

ReversingLabs TitaniumCloud Win32.Trojan.DarkGate

Threat name:

Win32.Trojan.DarkGate

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-10-09 12:44:06 UTC

File Type:

Binary

AV detection:

4 of 24 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jlvjgayjwwingreidb5izhftdob76h5kf72ne5qg4uh2yoqnw5ba._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI DarkGate

Threat name:

DarkGate

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/4aea930309b590d34488187a8c9cb31b83ff1faa2ff4d27606e50fac3a0db742