Overview

overview

3

Static

static

3

DDoSv1.0/D....0.exe

windows7-x64

1

DDoSv1.0/D....0.exe

windows10-2004-x64

1

DDoSv1.0/winsock.dll

windows7-x64

1

DDoSv1.0/winsock.dll

windows10-2004-x64

1

Darkness.l...X.html

windows7-x64

1

Darkness.l...X.html

windows10-2004-x64

1

Darkness.l..._X.xml

windows7-x64

1

Darkness.l..._X.xml

windows10-2004-x64

1

Darkness.l...sS.xml

windows7-x64

1

Darkness.l...sS.xml

windows10-2004-x64

1

Darkness.l...sc.vbs

windows7-x64

1

Darkness.l...sc.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Darkness.last.mod.rar

  • Size

    459KB

  • MD5

    4c736cb10035c4c1d938dd56a9392e73

  • SHA1

    f20dfc32fa1c26b220e4440b3b3f4b4d2f2ab123

  • SHA256

    400fb0fdec6e01cfc1850e8f43553454476ff757dfac46f23a5e8d04a4a718be

  • SHA512

    2e057267f89450674aed6d6671eb4ec5726b433cb71a565d2865c7c4955aa1285f23ebdec8867a81f2f0e24e9820ab164542b2e69de9db3718c2a25da29034cc

  • SSDEEP

    12288:96CNSB/UBS4CyF/2tiaDdGbyvubK6rVBF3P4hn/vdKS0:AlbyFJaZGGvublrVWd4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Darkness.last.mod.rar
    .rar

    Password: infected

  • DDoS v.1.0.zip
    .zip

    Password: infected

  • DDoSv1.0/DDOS v 1.0.exe
    .exe windows x86

    Password: infected

    50a8e2d6b39853ded6316b68508b46f4


    Headers

    Imports

    Sections

  • DDoSv1.0/Disclaimer.txt
  • DDoSv1.0/winsock.dll
  • Darkness.last.mod/Agent_X.cpp
  • Darkness.last.mod/Agent_X.dsp
  • Darkness.last.mod/Agent_X.dsw
  • Darkness.last.mod/Agent_X.h
  • Darkness.last.mod/Agent_X.ncb
  • Darkness.last.mod/Agent_X.opt
  • Darkness.last.mod/Agent_X.plg
    .html
  • Darkness.last.mod/Agent_X.sln
  • Darkness.last.mod/Agent_X.suo
  • Darkness.last.mod/Agent_X.vcproj
    .xml
  • Darkness.last.mod/DarKNesS.vcproj
    .xml
  • Darkness.last.mod/ReaD Me BeForE UsinG.txt
  • Darkness.last.mod/advscan.cpp
  • Darkness.last.mod/advscan.h
  • Darkness.last.mod/aliaslog.cpp
  • Darkness.last.mod/aliaslog.h
  • Darkness.last.mod/autostart.cpp
  • Darkness.last.mod/autostart.h
  • Darkness.last.mod/avirus.cpp
  • Darkness.last.mod/avirus.h
  • Darkness.last.mod/capture.cpp
  • Darkness.last.mod/capture.h
  • Darkness.last.mod/configure.h
  • Darkness.last.mod/crc32.cpp
  • Darkness.last.mod/crc32.h
  • Darkness.last.mod/crypt.cpp
  • Darkness.last.mod/crypt.h
  • Darkness.last.mod/dcc.cpp
  • Darkness.last.mod/dcc.h
  • Darkness.last.mod/ddos.cpp
  • Darkness.last.mod/ddos.h
  • Darkness.last.mod/defines.h
  • Darkness.last.mod/download.cpp
  • Darkness.last.mod/download.h
  • Darkness.last.mod/driveinfo.cpp
  • Darkness.last.mod/driveinfo.h
  • Darkness.last.mod/ehandler.cpp
  • Darkness.last.mod/ehandler.h
  • Darkness.last.mod/externs.h
  • Darkness.last.mod/findfile.cpp
  • Darkness.last.mod/findfile.h
  • Darkness.last.mod/findpass.cpp
  • Darkness.last.mod/findpass.h
  • Darkness.last.mod/fphost.cpp
  • Darkness.last.mod/fphost.h
  • Darkness.last.mod/ftpd.cpp
  • Darkness.last.mod/ftpd.h
  • Darkness.last.mod/functions.h
  • Darkness.last.mod/globals.h
  • Darkness.last.mod/httpd.cpp
  • Darkness.last.mod/httpd.h
  • Darkness.last.mod/icmpflood.cpp
  • Darkness.last.mod/icmpflood.h
  • Darkness.last.mod/ident.cpp
  • Darkness.last.mod/ident.h
  • Darkness.last.mod/includes.h
  • Darkness.last.mod/irc_send.cpp
  • Darkness.last.mod/irc_send.h
  • Darkness.last.mod/keylogger.cpp
  • Darkness.last.mod/keylogger.h
  • Darkness.last.mod/loaddlls.cpp
  • Darkness.last.mod/loaddlls.h
  • Darkness.last.mod/lsass.cpp
  • Darkness.last.mod/lsass.h
  • Darkness.last.mod/lsass2.cpp
  • Darkness.last.mod/lsass2.h
  • Darkness.last.mod/misc.cpp
    .vbs
  • Darkness.last.mod/misc.h
  • Darkness.last.mod/net.cpp
  • Darkness.last.mod/net.h
  • Darkness.last.mod/netutils.cpp
  • Darkness.last.mod/netutils.h
  • Darkness.last.mod/nicklist.h
  • Darkness.last.mod/passwd.h
  • Darkness.last.mod/pingudp.cpp
  • Darkness.last.mod/pingudp.h
  • Darkness.last.mod/processes.cpp
  • Darkness.last.mod/processes.h
  • Darkness.last.mod/psniff.cpp
  • Darkness.last.mod/psniff.h
  • Darkness.last.mod/redirect.cpp
  • Darkness.last.mod/redirect.h
  • Darkness.last.mod/remotecmd.cpp
  • Darkness.last.mod/remotecmd.h
  • Darkness.last.mod/rlogind.cpp
  • Darkness.last.mod/rlogind.h
  • Darkness.last.mod/rndnick.cpp
  • Darkness.last.mod/rndnick.h
  • Darkness.last.mod/scan.cpp
  • Darkness.last.mod/scan.h
  • Darkness.last.mod/secure.cpp
  • Darkness.last.mod/secure.h
  • Darkness.last.mod/session.cpp
  • Darkness.last.mod/session.h
  • Darkness.last.mod/shellcode.cpp
  • Darkness.last.mod/shellcode.h
  • Darkness.last.mod/socks4.cpp
  • Darkness.last.mod/socks4.h
  • Darkness.last.mod/synflood.cpp
  • Darkness.last.mod/synflood.h
  • Darkness.last.mod/sysinfo.cpp
  • Darkness.last.mod/sysinfo.h
  • Darkness.last.mod/tcpflood.cpp
  • Darkness.last.mod/tcpflood.h
  • Darkness.last.mod/tcpflood2.cpp
  • Darkness.last.mod/tcpflood2.h
  • Darkness.last.mod/tcpip.h
  • Darkness.last.mod/tftpd.cpp
  • Darkness.last.mod/tftpd.h
  • Darkness.last.mod/threads.cpp
  • Darkness.last.mod/threads.h
  • Darkness.last.mod/visit.cpp
  • Darkness.last.mod/visit.h
  • Darkness.last.mod/wildcard.cpp
  • Darkness.last.mod/wildcard.h
  • Darkness.last.mod/workstation.cpp
  • Darkness.last.mod/workstation.h