Category: Malware Analysis

In August and September of 2023, public reporting of the DARKGATE malware increased following its increased prevalence and distribution.

While reviewing samples submitted to Any.Run, I came across a recently-compiled binary that appeared to inject into a target process before performing some suspicious HTTP requests. After further analysis, this binary was found to be consistent with the VIDAR infostealer.