General

  • Target

    REMITTANCE ADVICE - TT231407ZA9893989.exe

  • Size

    434KB

  • Sample

    230717-tfx33sdh81

  • MD5

    bc43848fb7dadbbcf35d6c71245e349d

  • SHA1

    1a7b482f8a43456515188bfa5da676285bd40f83

  • SHA256

    a345d0b822b2ef2baffe88fc7084aa72e4bc90444337cd5bf7b828a94dbe805e

  • SHA512

    ead603badaaa7b93801eabaaba846d86c9f280fee77673787d09eac54734567a5d62219d26d9228648aa28725674bd2faabd30e200b01c617002aa41ae219d25

  • SSDEEP

    6144:/Ya6kCDm2IdQW1OFA0nn36ISxdv2L8uwgKrvBkdsbSjQ5q8HUM+ciX:/Y6CKVd9Ui6n36TgKrvBcCSj0HgciX

Score
10/10

Malware Config

Extracted

Family

darkcloud

Attributes

Targets

    • Target

      REMITTANCE ADVICE - TT231407ZA9893989.exe

    • Size

      434KB

    • MD5

      bc43848fb7dadbbcf35d6c71245e349d

    • SHA1

      1a7b482f8a43456515188bfa5da676285bd40f83

    • SHA256

      a345d0b822b2ef2baffe88fc7084aa72e4bc90444337cd5bf7b828a94dbe805e

    • SHA512

      ead603badaaa7b93801eabaaba846d86c9f280fee77673787d09eac54734567a5d62219d26d9228648aa28725674bd2faabd30e200b01c617002aa41ae219d25

    • SSDEEP

      6144:/Ya6kCDm2IdQW1OFA0nn36ISxdv2L8uwgKrvBkdsbSjQ5q8HUM+ciX:/Y6CKVd9Ui6n36TgKrvBcCSj0HgciX

    Score
    10/10
    • DarkCloud

      An information stealer written in Visual Basic.

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks