General

  • Target

    8219c51d6b3c5e8731f2f9164bd41d2ef90fd9b3c9d36254a9a5e2ed5169129c

  • Size

    453KB

  • MD5

    53b17361119282df6b06bd4c49befe91

  • SHA1

    35e8f173732b9d8c7ddd0ca2f17cccb6572a3d0a

  • SHA256

    8219c51d6b3c5e8731f2f9164bd41d2ef90fd9b3c9d36254a9a5e2ed5169129c

  • SHA512

    04be0af7470b5839ba0c6f27ca7a88008a4675cbf18664e6bc204a891c28b51dbc89a9d9a8e2a9c56390d2bc40226ddaec8274c732ef5b462e5c73ee9356a1fc

  • SSDEEP

    6144:r1F0FtW/vhqfAYw6mem1nQqcdcPLtbHuchmC0Ywsxf8az5ePvMANkIS8d1/w5KAl:r1uo/lCC5Hucd7ZIBjYKkJj6GmZU

Score
10/10

Malware Config

Extracted

Family

darkcloud

C2

https://api.telegram.org/bot6176944585:AAFxgdvQm38qYVvB7dVVU3d3NWuLmPx65Yo/sendMessage?chat_id=6289708560

Signatures

  • Darkcloud family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8219c51d6b3c5e8731f2f9164bd41d2ef90fd9b3c9d36254a9a5e2ed5169129c
    .exe windows x86

    2e44c023e945de76a75be81353118438


    Headers

    Imports

    Sections