General
- Target pago AFIP VEP enero23.pdf.exe
- Size 987KB
- Sample230131-ced55sec72
- SHA256 e59bfbd9a59b19bdfc2c7435858396d1ec99e5ddb5cc59c3c98e8c2e1bd5c947
- MD5 580a4621cd59c4630d988f8067cc185d
- SHA1 592187cd5dd880170d83d080238685d6a496dfa3
- SHA512 b1ed0a5cd070280b4c90f50a064630adfab2c7773ffecc2a83c575deeb8f9fd9395829b973e63c54b0f148c0b868fed7e1e3d0c98d79053d4ffffdd67df094e1
- SSDEEP 24576:ypZlh1cconBuOhjSXsxTNE5wrqhTPVcN1K1rtE+Wy0jFS124M1v9fJPqpMQD:rxTNywrCPVc3KptOy0e24MFSpMQD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
pago AFIP VEP enero23.pdf.exe
Resource
win7-20220812-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
darkcloud
Attributes
- email_from
- email_to
Targets
-
- Target pago AFIP VEP enero23.pdf.exe
- Size 987KB
- SHA256 e59bfbd9a59b19bdfc2c7435858396d1ec99e5ddb5cc59c3c98e8c2e1bd5c947
- MD5 580a4621cd59c4630d988f8067cc185d
- SHA1 592187cd5dd880170d83d080238685d6a496dfa3
- SHA512 b1ed0a5cd070280b4c90f50a064630adfab2c7773ffecc2a83c575deeb8f9fd9395829b973e63c54b0f148c0b868fed7e1e3d0c98d79053d4ffffdd67df094e1
- SSDEEP 24576:ypZlh1cconBuOhjSXsxTNE5wrqhTPVcN1K1rtE+Wy0jFS124M1v9fJPqpMQD:rxTNywrCPVc3KptOy0e24MFSpMQD
- MD5 SHA1 SHA512 SSDEEP
-
Suspicious use of SetThreadContext