← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Dissecting DarkGate: Modular Malware Delivery and Persistence as a Service
This report analyzes a phishing PDF that led to the delivery of a signed MSI file containing layered stages designed to avoid detection and deliver the DarkGate malware for persistence and remote access. The analysis covers extracting and decrypting the stages to uncover the final payload.
MITRE ATT&CK & Malware Families
Indicators of Compromise (2 / 21 total)
| TYPE | INDICATOR | DESCRIPTION | CREATED | |
|---|---|---|---|---|
| FileHash-SHA1 | 2a4062e10a5de813f5688221dbeb3f3ff33eb417 | — | 2024-02-29 | |
| FileHash-SHA1 | f3fe341d79224126e950d2691d574d147102b18d | — | 2024-02-29 |