Overview

overview

10

Static

static

3

SOA.exe

windows7-x64

10

SOA.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    SOA.zip
  • Size 409KB
  • Sample230718-h5htxagh37
  • SHA256 0bd93a3f99ba7af290a968f54e6aa9dd7f7d38dd59a033ae78afbee46a641e83
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
darkcloudpersistencestealer

Malware Config

Extracted

Family

  • darkcloud

Attributes

Targets

    • Target
      SOA.exe
    • Size 426KB
    • SHA256 8a0c61f29aa2697e44a61977bc06c3cf4c2bd8228ebc0fa00ac057b7375ff2ed
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    darkcloudpersistencestealer

    • DarkCloud

      An information stealer written in Visual Basic.

      stealerdarkcloud

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks