General

  • Target

    4228-140-0x0000000000400000-0x0000000000479000-memory.dmp

  • Size

    484KB

  • MD5

    487efb1244d704a0b2ade8110e29e6c9

  • SHA1

    1d600aabfd945e4bd9f4d8dfcf112740e05860aa

  • SHA256

    ae63d4becc01bfe5c83e6c0e8be1fbaedb6a5aecf6769f78f4d929f829c895a9

  • SHA512

    bc1d4e272bada40f3b2cae7a58be93e7f8d96d027a1529fb61453bb35fde37b25e8c22d1544bbdc37ba073efcb410a49b1836dfd18900a2584f4b07397bd0daf

  • SSDEEP

    12288:C/wFCAPipVhqHyb5cQJLnjYKkJj6GmZU:C+WfhqHyVDJvYb6nZ

Score
10/10

Malware Config

Extracted

Family

darkcloud

C2

https://api.telegram.org/bot5611706385:AAGLmpClaJm1mgAij2JpXXx3hFd9ZZlCedw/sendMessage?chat_id=1342429270

Signatures

Files

  • 4228-140-0x0000000000400000-0x0000000000479000-memory.dmp
    .exe windows x86

    59095c7cacb1d079e92fe30a5fb5351e


    Headers

    Imports

    Sections