DarkGate again but… Improved?

Executive summary

During 2023, DarkGate made a comeback with a version full of new features, becoming one of the most preferred Remote Access Trojans (RATs) by malicious actors. However, this momentum also required continuous updates to not only include the latest capabilities, but also to try to stay off the radar of security applications. Something we discussed in a blog published at the end of the previous year.

All of these changes have culminated with the release of DarkGate version 6 at the beginning of this year, something that other researchers have already noticed. However, the execution chain has almost stayed the same, until the month of March, when a new method was released, the usage of the AutoHotKey toolkit to execute the final DarkGate payload that our peers at McAfee talked about.

The Trellix Advanced Research Center has analyzed the different updates regarding the DarkGate author, RastaFarEye, as well as the latest DarkGate campaigns and versions, delving into the changes and features they include. This analysis has resulted in the discovery of some servers that contained both DarkGate and PikaBot samples, a behavior observed by other security colleagues, probably due to the fact that the operator bought both services, not relying on a single malware family for its operations.

RastaFarEye latest insights

The DarkGate developer, RastaFarEye, is not a popular profile in the underground anymore since some users raised complaints about its services at the end of year 2023 and caused a ban of the user in the underground forums.

Figure 1: RastaFarEye profile banned on an underground forum.

Figure 1: RastaFarEye profile banned on an underground forum.

This situation may have been detrimental to the economic interests of RastaFarEye, however, we have seen how DarkGate is still being distributed and updated on a regular basis. Therefore,we believe that RastaFarEye continues to sell and develop the service despite the ban from underground forums.

Thanks to the small number of people who were able to buy the DarkGate Malware-as-a-Service (MaaS) program (initially only 10 people were able, nevertheless, this number was increased to 30 due to the high popularity of the product) during the previous year, RastaFarEye has continued to receive monthly payments to support the development of new features for DarkGate.

Moreover, RastaFarEye seems to have tried to adopt other monikers in some underground forums to try to sell new products according to several forum users who base their claims on how this new user uses the Russian language and the way it creates posts. Some of these new monikers may be Bordislav, who tried to sell a fully undetectable loader, and authpress.

Figure 2: RastaFarEye adopting a new moniker, Bordislav, to sell a new toolkit.

Figure 2: RastaFarEye adopting a new moniker, Bordislav, to sell a new toolkit.

Execution chain

# DarkGate campaigns tend to adapt really fast, modifying different components to try to stay off security solutions. In previous campaigns, we have seen how it has mainly relied on AutoIt3 to deploy the last stages, but also has used DLL sideloading to do this task. However, this is the first time we find DarkGate using AutoHotKey, a not so common scripting interpreter, to launch DarkGate.

This campaign is composed of five stages, the first one, a malicious attachment, the second stage, a Visual Basic Script (VBScript), after that the third stage comes into place, a Powershell script, then the fourth one is executed, the AutoHotKey script, along with the interpreter and a text file containing an encoded version of the DarkGate payload, and finally the the fifth stage, the DarkGate payload.

Figure 3: Overview of the DarkGate v6 multistage infection chain. The initial vector is an attachment, delivered via email, that could be either an Excel or an HTML document claiming to be an Office document. This file will download and execute a VBScript, which will download and execute a Powershell script, which, in turn, will download three files, an AutoHotKey interpreter, an AutoHotKey script and a text file. The AutoHotKey script will be executed via the interpreter, which will decode the text file to ultimately execute the DarkGate payload.

Figure 3: Overview of the DarkGate v6 multistage infection chain. The initial vector is an attachment, delivered via email, that could be either an Excel or an HTML document claiming to be an Office document. This file will download and execute a VBScript, which will download and execute a Powershell script, which, in turn, will download three files, an AutoHotKey interpreter, an AutoHotKey script and a text file. The AutoHotKey script will be executed via the interpreter, which will decode the text file to ultimately execute the DarkGate payload.

First stage

The initial stage of DarkGate campaigns varies from one to another, like we had seen in the past. However, one of the latest campaigns uses phishing emails containing either an Excel or an HTML document as attachment.

In the case of Microsoft Office documents, if the user opens them, some message urging the victim to enable editing of the document and click a button will appear.

Figure 4: Excel document used to lure the victim to click the “Open” button, which will download and execute the next stage.

Figure 4: Excel document used to lure the victim to click the “Open” button, which will download and execute the next stage.

If the user follows these instructions, a VBScript macro will be downloaded from the Internet via SMB using the remote template injection technique.

Figure 5: URL inside the Excel document to remotely download a VBScript as a macro file.

Figure 5: URL inside the Excel document to remotely download a VBScript as a macro file.

Nevertheless, if the document is an HTML, it will try to make the victim think they have opened a Microsoft Word document, urging them to click on a button that will download, using the search-ms protocol handler, the next stage, a VBScript.

Figure 6: HTML file mimicking a Microsoft Word document to lure victims to click the “Cloud View” button, which will download and execute the next stage.

Figure 6: HTML file mimicking a Microsoft Word document to lure victims to click the “Cloud View” button, which will download and execute the next stage.

In this case, to successfully download the next stage, the URL is Base64 encoded and reversed using Javascript contained in the HTML code.

Figure 7: Content of the HTML file, including the encoded URL (highlighted in a red box).

Figure 7: Content of the HTML file, including the encoded URL (highlighted in a red box).
Figure 8: Decoded URL contents.
Figure 8: Decoded URL contents.

VBScript

The VBScript is mainly composed of junk data, containing only 4 real lines of code, which will execute a Powershell command to download and execute the next stage, another Powershell script.

Figure 9: VBScript used to download the next stage, a Powershell script.

Figure 9: VBScript used to download the next stage, a Powershell script.

Powershell script

The third stage will consist of a Powershell script whose main goal will be downloading three files, a legitimate AutoHotKey interpreter, an AutoHotKey script and plain text file, which contains the hexadecimal encoded DarkGate payload. These files will be saved with the names “AutoHotKey.exe”, “script.ahk” and “test.txt”, respectively.

Figure 10: Powershell script used to download three files, the AutoHotKey interpreter, the AutoHotKey script and the text file containing the encoded version of the DarkGate payload. Also, the script will execute the AutoHotKey script using the interpreter.

Figure 10: Powershell script used to download three files, the AutoHotKey interpreter, the AutoHotKey script and the text file containing the encoded version of the DarkGate payload. Also, the script will execute the AutoHotKey script using the interpreter.

AutoHotKey script

The AutoHotKey script, “script.ahk”, will be executed thanks to the AutoHotKey interpreter, “AutoHotKey.exe”, also downloaded by the 3rd stage Powershell script, which will decode and execute the encoded DarkGate payload stored in the “test.txt” file.

Figure 11: AutoHotKey script used to decode and execute the DarkGate payload.

Figure 11: AutoHotKey script used to decode and execute the DarkGate payload.

The decoded content of the “test.txt” file contains a small shellcode at the beginning, which will perform a series of jump instructions until it reaches the main DarkGate payload.

Figure 12: Shellcode at the beginning of the decoded contents of the “test.txt” file.

Figure 12: Shellcode at the beginning of the decoded contents of the “test.txt” file.

DarkGate v6

DarkGate version 6 received the biggest update since version 4, the main code has been modified, including the configuration, evasion techniques, and supported commands.

Version 6.3.27
MD5 985ada16a3f42b15b7ec95ad37aeb4db
SHA1 575bbef3aae77f559677645ca555c9842c710763
SHA256 d74df69b8fa6675dfe1dd5b5488cd76d870013dbe256b44d77486771f9d35c57
Compiler Borland Delphi (6-7)
File size 466,944 bytes (456 KB)
Detection Name Generic.mg.985ada16a3f42b15
Table 1: Details of analyzed sample.

Strings

In version 6 there are no updates in terms of string encryption with respect to DarkGate v5, all the strings are in plain text.

However, version 6 uses the same Base64 encoding implementation, including the exact same custom alphabet, used in previous versions to decode strings. In this case, this is employed to encode the HTTP POST requests the malware performs and the log file it creates.

Figure 12: Custom Base64 alphabet present in DarkGate versions 4, 5 and 6.

Figure 12: Custom Base64 alphabet present in DarkGate versions 4, 5 and 6.

Configuration

As seen in previous versions, the configuration of DarkGate has changed over time and this version is not an exception. In this case, the first big modification is the fact that the configuration is encrypted, not encoded like in version 4, nor in plain text as in version 5. Moreover, it contains new parameters and the ones that already existed have been reorganized. These modifications have made previous configuration extraction scripts useless, that’s why we have created a new script to extract the configuration from DarkGate v6 samples.

Figure 13: Python implementation of the configuration decryption algorithm used by DarkGate.

Figure 13: Python implementation of the configuration decryption algorithm used by DarkGate.

The DarkGate v6 configuration parameters can be interpreted as follows, notice that this version did not include any specification about their names.

ID Description
0 Command and control server
1 Set up persistence in the system, ensuring bypass of security software (previously known as the “rootkit” module)
2 Unknown
3 Verifies if the current system is running under Virtual Box, VMware or Hyper-V machine by checking the display information of the system
4 Checks the free disk space available in the system. If the requirement defined in ID 18 is not met, DarkGate will not execute
5 Checks if the process of the current system is an Intel Xeon
6 Verifies if the current system is running under Virtual Box, VMware or Hyper-V machine by checking the display information of the system
7 Check the RAM size of the system. If the requirement defined in ID 19 is not met, DarkGate will not execute
8 Display a fake error during the execution. The caption and content of this message are contained in parameters 11 and 12 respectively
9 Unknown
10 Unknown
11 Text used as caption for a fake error message
12 Base64 encoded text used as content for a fake error message
13 Unknown (numeric value)
14 Unknown
15 Port number used to communicate with the C&C server
16 Unknown
17 Unknown
18 Numerical value that represents the minimum amount of free disk space needed to run DarkGate
19 Numerical value that represents the minimum amount of RAM needed to run DarkGate
20 Unknown
21 Unknown
22 Indicates that the payload was deployed inside a DLL
23 Indicates that the payload was deployed inside an Autoit3 file
24 Unknown
25 String value that is not used by the binary. However, it is similar to the parameter 23 of previous versions, which was used as the sample “username”. This value is not used by the sample, but it may be used to identify DarkGate affiliates or campaigns.
26 The binary will relaunch using process hollowing to bypass security products
27 XOR key used to decrypt the payload only if the binary was deployed not using AutoHotKey or AutoIt3 scripts
28 Unknown
29 Numerical value that states which application was abused to perform a DLL side-loading attack, if the number is equal to 7, GUP.exe (Notepad++) will be used, if not, KeyScramblerLogon.exe (application previously seen in DarkGate v5 distribution)
30 Unknown
31 Indicates that the payload was deployed inside an AutoHotKey file
32 It will try to bypass antivirus software using DLL injection or AddressOfEntryPoint injection. Also, after setting up the persistence mechanism, it will force a critical error, causing the Blue Screen Of Death (BSOD).
33 Indicates that the payload was deployed inside a DLL called sqlite3.dll, performing this way a DLL side-loading attack
tabla Contains a string value that will be stored in a file called “test.txt”, which will be later used to decrypt the AutoIt3 script, if it has been used during the deployment phase, when DarkGate would be restarted
Table 2: DarkGate configuration parameters.

An example of decrypted configuration can be seen in the following snippet.

0=103.124.106.237|

8=No

11=DarkGate

12=R0ijS0qCVITtS0e6xeZ

13=6

14=Yes

15=80

1=Yes

32=No

3=Yes

4=No

18=50

6=Yes

7=No

19=4000

5=No

21=No

22=No

23=No

31=Yes

24=edr2

25=admin888

26=No

27=bedxvHpr

28=No

29=2

tabla=4V7z,jJfq) [E$mdY3]2}uUwygI&GLX6tpObsPT{=nS8vHBRhxQrc(MCZ*aDi.l90N”eA5KkFoW1

It is important to highlight that the configuration seems to contain some mistakes, like the fact that the parameters 3 and 6, to check if it is running in a virtual environment, enable the same validation, something we did not see in previous versions.

Figure 14: DarkGate usage of parameters 3 and 6, which describe the same behavior. This implementation may indicate a potential development mistake.

Figure 14: DarkGate usage of parameters 3 and 6, which describe the same behavior. This implementation may indicate a potential development mistake.

Moreover, some other parameters, like 13, 21, 24 and 28 are not used at all, however they are set in the sample. Something similar happens with parameters 32 and 33, which are checked by DarkGate, but are not included in the configuration.

Features

In previous versions we could see how DarkGate evolved from one version to another, including new features and characteristics. In the most recent version, the number 6, the author made the biggest update in months, restructuring the main code and how the commands are processed, including and discarding new ones.

One of the features we analyzed in our previous blog was the “rootkit” feature, which, in this case, does not exist as it was. In version 6, DarkGate still includes this feature, but it is executed along with the persistence routine, ensuring the sample is not detected when it is relaunched.

To perform this “rootkit” feature, also we can call it “security software bypass”, DarkGate still relies mainly on parent PID (PPID) spoofing and process injection techniques, such as Process Hollowing, DLL injection, and AddressOfEntryPoint injection, being the latter the last inclusion.

Figure 15: AddressOfEntryPoint injection technique implemented in DarkGate v6.

Figure 15: AddressOfEntryPoint injection technique implemented in DarkGate v6.

Depending on the antivirus installed in the system and the deploying method used (AutoIt, DLL, AutoHotKey), DarkGate will employ a specific process injection technique and target process to achieve the expected result. This level of precision and the fact that version 6 supports more antivirus make the implementation of this feature much bigger than previous versions.

Another feature that was slightly modified was the command and control communication protocol version 6 uses; something that our peers at TrendMicro already highlighted in a blog post.

Other features, such as persistence, keylogger, and clipper may have been slightly modified. However, the way they are performed are still the same.

Commands

In terms of supported commands, DarkGate supports 77 different commands, some of them are similar, being the only difference the number of parameters they support.

In the following table, the different supported commands with a brief explanation is shown

ID Command description
1000 If this command is sent, it notifies the command and control that DarkGate startup is completed and it will start listening for incoming commands. If this command is received, it sleeps a time determined by the provided command
1003 Get system information
1004 Show the text “test msg” in a message box
1007 Get drives information, list all files from C drive and get Desktop, User, APPDATA and Temp paths
1008 RAR compress only the contents of the APPDATA folder
1010 List files from the specified directory
1011 RAR compress recursively the contents of the APPDATA folder
1012 Send information about the available Rar.exe application to the command and control
1014 Send RAR file to the command and control
1015 Delete RAR file after sending it to the command and control
1020 Get file attributes
1021 RAR compress the given folder
1022 Disables RAR compression/extraction and directory listing. It is useless, since this value is modified if commands 1020, 1021, 103
1023 File deletion
1026 Write file to disk
1029 Send error message to the command and control
1030 Execute process
1034 Recursively list files from the specified directory
1038 Get display monitors
1039 Take multiple screenshots
1042 Modify screenshot parameter
1043 Take screenshot
1044 Modifies mouse cursor position and performs a double left click
1045 Modifies mouse cursor position and performs a left click
1046 Modifies mouse cursor position and performs a right click
1048 Receives an integer that is used to adjust the capacity of the screenshot command
1049 Reverse shell using Powershell
1050 Exit reverse shell
1051 Terminate reverse shell threads and process
1052 Encrypts and encode DarkGate log files (which includes the logged keystrokes) prior to send them to the command and control
1055 Inject binary into RegAsm.exe or MicrosoftEdgeUpdate.exe using process hollowing
1056 Decrypt binary and inject it using process hollowing
1057 Write binary to disk and execute it
1058 Get details from specified process
1059 Terminate specified process
1060 Process Hollowing
1061 Execute a shellcode, which resembles the loader code in DarkGate version 5, using AddressOfEntryPoint injection
1062 DLL injection against a given PID
1063 DLL injection
1064 Execute a shellcode, which resembles the loader code in DarkGate version 5, using Process Hollowing
1065 Extract browser credentials using WebBrowserPassView
1066 Self-deletion using the following command:
cmd.exe /c ping 127.0.0.1 & del /q /f /s c:temp & del /q /f /s & rmdir /s /q

)
1067 Extract network credentials using Network Password Recovery
1069 Modify the settings file, which includes DOMAINS, NOTIFICATIONS and EPOCH parameters
1070 Extract Outlook credentials using Mail PassView
1071 Steal FileZilla sensitive data
1072 Start audio recording
1073 Start audio streaming
1074 Get available microphones
1075 Stop audio recording
1076 Stop audio streaming
1077 Stop audio recording and streaming
1078 Send confirmation to the command and control server that audio streaming has started
1079 Remove stored credentials
1080 Move browser files, in the case of Opera, it also removes the cookies file
1081 Force a critical error, causing the Blue Screen Of Death (BSOD).
1082 Sends a message using WinAPI function SendMessageA every second
1083 Shutdown system using the shutdown command:
cmd.exe /c shutdown -f -s -t 0
1084 Restart system using the shutdown command:
cmd.exe /c shutdown -f -r -t 0
1086 Steal browser cookies
1088 Hide specified window
1089 Check administrator rights if persistence parameter (ID: 1) is enabled
1090 Process Hollowing
1091 Process Hollowing
1092 Executes a binary using Process Hollowing, if already exists, it is terminated first
1093 Reverse shell using CMD
1094 Send keystrokes to the active window
1096 Stop multiple screenshots command, ID 1039
1097 Relaunch DarkGate using AutoIt3 mode
1098 Kill specified browser process and inject binary into msbuild.exe
1099 List files from the specified directory and get drives information
1102 Terminate a threat if was previously created
1103 Look for a specified process, get information about it and check if it contains “cookies” or “cookies-journal” strings. However, this information is not used
1104 Relaunch DarkGate using AutoHotKey mode
1108 Launch DarkGate using the Notepad++ DLL side-loading mode
Table 3: DarkGate v6 supported commands.

DarkGate includes many already known commands, like those used to take screenshots, to control the system using a reverse shell, or to steal credentials from applications, such as web browsers or FileZilla, and the system. However, several commands to aid the information stealing process have been included, like the audio recording, the mouse control, or the keyboard management features.

Figure 16: Commands to perform a mouse left click (1045), double left click (1044) and a right click (1046).

Figure 16: Commands to perform a mouse left click (1045), double left click (1044) and a right click (1046).

Some other commands that were included are related with the new distribution method that employs the AutoHotKey interpreter or with new evasion techniques, like the AddressOfEntryPoint injection technique mentioned above.

However, version 6 not only includes new commands, but also lacks some of them from previous versions, like the privilege escalation, the cryptomining, or the hVNC (Hidden Virtual Network Computing) ones. Something that may indicate that the developer wanted to give DarkGate stealthier capabilities, removing those features that may cause more noise. Moreover, since DarkGate is sold to a small group of people, it is also possible that the customers were not interested in those features, forcing RastaFarEye to remove them.

Conclusion

The RastaFarEye business gates have closed, but their windows are still open, delivering new versions of DarkGate on a regular basis. These versions include a wide variety features which seem to have been designed in an attempt to remain undetectable from security software, from the inclusion of the AutoHotKey script and interpreter to deliver the final payload, to the removal of some key features, highlighting RastaFarEye motivation to satisfy the needs of their little customer base. Based on that, the appearance of new DarkGate versions during the following months is almost guaranteed.

However, the fact that RastaFarEye has tried to create new accounts in underground forums may indicate that it needs new affiliates, not only for the new products that it is creating, but also for DarkGate. It is true that these new accounts have not offered DarkGate publicly, but it is obvious that if they had done it, they would have been banned instantly, since it would be the confirmation that the person behind those accounts is RastaFarEye.

Appendix A – Trellix DarkGate detection

Product Signature
Endpoint Security (ENS) VBS/DarkGate.c
VBS/DarkGate.d
VBS/DarkGate.e
T-DWN-CNG
T-DWN-CMV
HTML/DarkGate.a
Downloader.DXV
T-TRO-WPH
Script-Agent.C
Script-Agent.D
Endpoint Security (HX) Trojan.Generic.35576442
Gen:Variant.Doina.74418
Generic.mg.985ada16a3f42b15
Trojan.GenericKD.72136615
Trojan.Agent.GKGK
Trojan.Agent.GKDZ
Heur.BZC.UGZ.Boxter.1.1305E8EC
VB:Trojan.Agent.GKKC
Trojan.PWSH.Agent.CZ
Trojan.PWSH.Agent.CX
Trojan.PWSH.Agent.DB
Trojan.PWSH.Agent.DA
Trojan.PWSH.Agent.CY
Network Security (NX)
Detection as a Service
Email Security
Malware Analysis
File Protect
Malicious Trojan Indicator
Downloader.HTML.Generic.MVX
Downloader.PS1.Generic.MVX
Backdoor.Win.DARKGATE.MVX
FEC_Downloader_OOXML_Generic_14
FEC_Downloader_HTML_Generic_36
FEC_Downloader_VBS_Generic_54
FEC_Loader_AHK_Generic_1
FEC_Downloader_PS1_Generic_47
FE_Loader_Win_Generic_48

Appendix B – MITRE ATT&CK

Tactical Goal ATT&CK Technique (Technique ID)
Initial Access T1566.001 Phishing: Spearphishing Attachment
Execution T1204.002 User Execution: Malicious File
T1059.001 Command and Scripting Interpreter: PowerShell
T1059.003 Command and Scripting Interpreter: Windows Command Shell
T1059.005 Command and Scripting Interpreter: Visual Basic
Persistence T1547.001 Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder
Privilege Escalation T1055.012 Process Injection: Process Hollowing
T1543.003 Create or Modify System Process: Windows Service
Defense Evasion T1027.002 Software Packing
T1027.007 Dynamic API Resolution
T1027.009 Embedded Payloads
T1134.004 Access Token Manipulation: Parent PID Spoofing
T1055 Process Injection
T1055.002 Process Injection: Portable Executable Injection
T1055.012 Process Injection: Process Hollowing
T1574.002 Hijack Execution Flow: DLL Side-Loading
Credential Access T1555 Credentials from Password Stores
T1555.003 Credentials from Password Stores: Credentials from Web Browsers
T1056.001 Input Capture: Keylogging
T1528 Steal Application Access Token
T1539 Steal Web Session Cookie
Discovery T1010 Application Window Discovery
T1217 Browser Information Discovery
T1083 File and Directory Discovery
T1497.001 Virtualization/Sandbox Evasion: System Checks
T1614.001 System Location Discovery: System Language Discovery
T1518.001 Software Discovery: Security Software Discovery
T1057 Process Discovery
Collection T1005 Data from Local System
T1056.001 Input Capture: Keylogging
T1113 Screen Capture
T1115 Clipboard Data
T1123 Audio Capture
T1119 Automated Collection
T1560.001 Archive Collected Data: Archive via Utility
Command and Control T1071.001 Application Layer Protocol: Web Protocols
T1132.002 Data Encoding: Non-Standard Encoding
T1573.001 Encrypted Channel: Symmetric Cryptography
T1219 Remote Access Software
Exfiltration T1041 Exfiltration Over C2 Channel
Impact T1489 Service Stop
T1529 System Shutdown/Reboot

Appendix C – DarkGate v6 configuration extractor script

https://github.com/trellix-arc/tig-threat-research/blob/main/DarkGate/darkgate_config_extractor.py

Appendix D – IoCs

XLSX
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HTML
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VBScript
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Powershell

c96eb2b8f524b2be4e1801445e7f5e542d34cd7033482560712b12d76ea69da9
91bda8770f742863f4f99d2e3dbc7ad2b8a0090b21ceaaefb1a4e8ff62b81d69
fe2c275b44ea6e35ce429f8724c0a11d0d2ed16e25ea4d34a5b1f03db504d7e3
b88716e41bac465880a7d43edfc39454c0ab3acfeb0d98ffd7e21cd738af50bf
2a4e4a3d760a36125da04280a3ae71e4f32a22b11d4b153f306fc0faed615f89
ae81a758cb103d6b9c8495930c1478812ee57655b820be2558c1a7d81f4713c8
db9654e864f86dedbf99f4380a4f7db182c17cd269bbb96bdf63e7ffb977ad37
51ab25a9a403547ec6ac5c095d904d6bc91856557049b5739457367d17e831a7

AutoHotKey script
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Payload

7d04dbf0573dd2d06271b2c8df6a6d3c77aec79533422a7fe225ec2c6c977a7c
7ee7068f76dba64a08a7ff190a00b658acded15498de22c47cf3027096432ca1
27a70544c6b295068ee30b155c93d61d44e2a351438c4c674a7b0d8d619a7d13
42e95f257811a48d632afd51008d7e20dc23eed7b0d7166cb5ec494a1e992093
44aba9e5f6f7291a74b53252dc11e61c5c7c4a698a9e4238066af585f4bec8e2
077ac6ffb10ab90307decfd2aaaa6d2672e2baa02e6e727765dc2ce3fcd7f095
2463dc75e435c7f0f0b13c55aa7870d1c2ab56378d334261a9a913685bacdd53
4546eef24da790a7abac1f35c78672b7c184cdd4714f08f6e3726279a80cbf50
8736c0ff1b6f34f242a060cc8b1eab6d87ce9d486cc166d6964d3c5260c7f157
32685cdcf4f754ac2f2119df77c97da07169c9c7458ca5906f89bd06d5497684
a4c7584c85cb62c533b09c6efb6e67c71c995eb220364ab947051da20e74db9a
d68de20c720427d99aa6ac253402c66ae9904fb667956c98ab9e36fe34a59635
d74df69b8fa6675dfe1dd5b5488cd76d870013dbe256b44d77486771f9d35c57
ef5819087e14135335f0a158903c9389173d0234254c0e5cadad5948e434e23e
4bb4266c330c9b9c301c9a2db03039547aa3004b1cd479187fbec96eb6e3f2c5
5bb19a2d7dd69e280046de0f65475498678daf6a542701c027a693e39ec1890a
6b2308012c1044bb48c8a395102ebae0524e2141237960a51651c8d9a45ecd58
6cca9ca3044fc3ab9bb019cee5027925f54832ecfbca88e55acfe59bb5ef6a4a
6ed1b68de55791a6534ea96e721ff6a5662f2aefff471929d23638f854a80031
007ebd9e42b39862ceff9869cfa34f46078def85805216c458601f5d22b3db0e

Network IoCs

Initial stages

nextroundst[.]com
rourtmanjsdadhfakja[.]com
goingupdate[.]com
103[.]124[.]106[.]237
45[.]140[.]146[.]2:443
45[.]63[.]52[.]184:8094
31yc[.]com
adsfasdf[.]com
149[.]56[.]252[.]31:8094
145[.]239[.]202[.]110:8094
irreceiver[.]com
withupdate[.]com
adfhjadfbjadbfjkhad44jka[.]com
porsherses[.]com
badbutperfect[.]com
193[.]142[.]146[.]203
cayennesxque[.]booqdfjfvph
backupitfirst[.]com
diveupdown[.]com
buassinnndm[.]net
45[.]89[.]53[.]187
45[.]61[.]156[.]3
170[.]130[.]55[.]130
94[.]158[.]245[.]124
5[.]252[.]177[.]213
86[.]104[.]72[.]124
45[.]89[.]53[.]187sMS_EXCEL_AZURE_CLOUD_OPEN_DOCUMENT.vbs
86[.]104[.]72[.]124prvEXCEL_DOCUMENT_OPEN.vbs
86[.]104[.]72[.]124prvMS_EXCEL_ATTACHMENT_04.03.24.vbs
http://nextroundst[.]com/qzaugqmb
http://rourtmanjsdadhfakja[.]com/bjnxidjt
http://goingupdate[.]com/ptoleqco
http://103[.]124[.]106[.]237/wctaehcw
http://45[.]140[.]146[.]2:443/ivpzhehw
http://45[.]63[.]52[.]184:8094/jifxcefs
http://31yc[.]com/sjcgwjvm
http://adsfasdf[.]com/jklfnfol
http://45[.]63[.]52[.]184:8094/nsonlrfy
http://31yc[.]com/sjcgwjvm
http://149[.]56[.]252[.]31:8094/vnezipnf
http://145[.]239[.]202[.]110:8094/cldhxbsy
http://irreceiver[.]com/abtjvwag
http://withupdate[.]com/zuyagaoq
http://45[.]63[.]52[.]184:8094/ydbytvzb
http://adfhjadfbjadbfjkhad44jka[.]com/dekcbnwq
http://rourtmanjsdadhfakja[.]com/kclddtnk
http://31yc[.]com/gcwkaqrq
http://porsherses[.]com/miipnznj
http://149[.]56[.]252[.]31:8094/mgmmrccw
http://badbutperfect[.]com/nrwncpwo
http://nextroundst[.]com/kqcmvqtj
http://193[.]142[.]146[.]203/utjudloz
http://cayennesxque[.]booqdfjfvph
http://backupitfirst[.]com/rudxfiyb
http://31yc[.]com/jjwusvmw
http://149[.]56[.]252[.]31:8094/vnezipnf
http://rourtmanjsdadhfakja[.]com/lhikchzj
http://31yc[.]com/gcwkaqrq
http://diveupdown[.]com/uyvbjbho
http://buassinnndm[.]net/czeeyrlr
http://irreceiver[.]com/vceadwkonp
http://irreceiver[.]com/endbcibm
http://irreceiver[.]com/giajwris
http://103[.]124[.]106[.]237/gsgqmjivmr
http://103[.]124[.]106[.]237/rjlcmdey
http://103[.]124[.]106[.]237/giibkqxo
http://goingupdate[.]com/vzejpwemdt
http://goingupdate[.]com/eolimcsx
http://goingupdate[.]com/rmgfzmtm
http://irreceiver[.]com/wbipazkrpk
http://irreceiver[.]com/fcpivgkx
http://irreceiver[.]com/dxuudgzy
http://backupitfirst[.]com/wtabzuuxye
http://backupitfirst[.]com/ltndniiq
http://backupitfirst[.]com/hcmjchqj
http://goingupdate[.]com/ldehoxalfr
http://goingupdate[.]com/lrrqhysx
http://goingupdate[.]com/mthmvbhw
http://irreceiver[.]com/ngvoyjqalr
http://irreceiver[.]com/bbiafaxa
http://irreceiver[.]com/argigbtt
http://backupitfirst[.]com/wgfqneerod
http://backupitfirst[.]com/tvrewtdm
http://backupitfirst[.]com/mhrcbdpm
http://45[.]61[.]156[.]3/cmd[.]txt

DarkGate payload

adfhjadfbjadbfjkhad44jka.com
backupitfirst.com
badbutperfect.com
buassinnndm.net
diveupdown.com
goingupdate.com
nextroundst.com
nl-2.dalilylyticsdat.com
withupdate.com

This document and the information contained herein describes computer security research for educational purposes only and the convenience of Trellix customers.

Source: https://www.trellix.com/blogs/research/darkgate-again-but-improved/