Trojan.AHK.DARKGATE.XEDIZ

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Übertragungsdetails

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Andere Details

Es macht Folgendes:

• It disables the script's tray icon.
• It reads the contents of the following file:
  • {Malware Path}\test.txt → DarkGate TrojanSpy
• It uses AutoHotkey's NumPut function to store the contents of the said file to a virtually allocated memory.
• It calls the allocated memory as a function, executing it.