Disarming DarkGate: A Deep Dive into Thwarting the Latest DarkGate Variant
Essential information
- Published
- 15/07/2024 15:14
- Modified
- 15/07/2024 15:27
- Tags
- 2024-07-15 darkgate rat
- Related entities
- 4 observables, 18 techniques (mitre), 1 malware
Description
This report analyzes a recent phishing campaign distributing a new DarkGate Remote Access Trojan variant. The malware leverages various obfuscation and anti-analysis techniques, including process hollowing, anti-VM checks, and encoding. It supports numerous malicious functionalities like ransomware, credential theft, remote control, and system disruption, controlled by a command-and-control server. The analysis provides in-depth technical details on the malware's execution flow, anti-detection mechanisms, and command handling.