MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8a85602ac76f5ee8c7453fc82ecc096dcba85a991a9b094288cdd4d76615e7b8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8a85602ac76f5ee8c7453fc82ecc096dcba85a991a9b094288cdd4d76615e7b8
SHA3-384 hash:	9db343b79a29a2c8e941ba6062151613fe27cc0b6e32e08a7f90de81e7cc07043e508c4e16b533a6477b311685e130b2
SHA1 hash:	3b626d8d8d142d5fff76dbb5fe8049314c3a58d4
MD5 hash:	ff598b0d4adfc62e4f4afcaf06ee5261
humanhash:	hawaii-whiskey-jig-jig
File name:	dg.cmd
Download:	download sample
Signature	DarkGate Alert Create hunting rule
File size:	233 bytes
First seen:	2023-09-28 11:04:55 UTC
Last seen:	Never
File type:	cmd
MIME type:	text/plain
ssdeep	6:4I56hB6uxOoZ3QWQ/mIHYcPs2Wfy3GHYcPsK0c3R:4I56GuvJQf+sYoqfdYor04R
TLSH	T1C7D0A74F546B12BFC447EB4A116641CBE407205F4F77CC98974D88C5500F509F454B59
Reporter	marqufabi
Tags:	AA11 cmd DarkGate ta577

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

193

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Other.Malware-gen.23573.832.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/65155de034be449f011abc44/reports/60e4b92f-0afb-4e1b-965e-6b6f4431bc78/overview

Hybrid Analysis BAT/TrojanDownloader.Agent

Verdict:

Malicious

Labled as:

BAT/TrojanDownloader.Agent

Link:

https://www.hybrid-analysis.com/sample/8a85602ac76f5ee8c7453fc82ecc096dcba85a991a9b094288cdd4d76615e7b8

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

72 / 100

Link:

https://www.joesandbox.com/analysis/1315955

Signature

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8a85602ac76f5ee8c7453fc82ecc096dcba85a991a9b094288cdd4d76615e7b8/

ReversingLabs TitaniumCloud Script-BAT.Trojan.DarkGate

Threat name:

Script-BAT.Trojan.DarkGate

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-09-28 11:05:06 UTC

File Type:

Text (Batch)

AV detection:

9 of 38 (23.68%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rkcwakwhn5porr2fh7ec5tajnxf2qwuzdknqsquizxknozqv464a._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

n/a

Link:

https://tria.ge/reports/230928-st63gadg85/

Behaviour

Suspicious use of AdjustPrivilegeToken

Suspicious use of WriteProcessMemory

Executes dropped EXE

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/8a85602ac76f5ee8c7453fc82ecc096dcba85a991a9b094288cdd4d76615e7b8