General

  • Target

    PO-2320.exe

  • Size

    892KB

  • Sample

    230720-lzg7zafc56

  • MD5

    45bdd49d71f18e1fbe45a0e4ab3e023d

  • SHA1

    9b614d6d1cdd98ec483014d767a4a15160313437

  • SHA256

    c05fbef6ef68934b1381cf48a956981ea7e1bc4969ca97c8d9851c0309e4538f

  • SHA512

    e336dedccaee99f7267f5b4bc4bb7df8bbf9917726a0ac3dc66e1eb675715868fa9c1b09f1cc9502f89e522594c58a4cc9c9dea9e12a783574320b76bba7bc0f

  • SSDEEP

    24576:OTdCjE5asQ59ZH4iKcxS1IQGMsclrxOc:O5CAIsQ59OMxS1vi8Q

Score
10/10

Malware Config

Extracted

Family

darkcloud

Attributes

Targets

    • Target

      PO-2320.exe

    • Size

      892KB

    • MD5

      45bdd49d71f18e1fbe45a0e4ab3e023d

    • SHA1

      9b614d6d1cdd98ec483014d767a4a15160313437

    • SHA256

      c05fbef6ef68934b1381cf48a956981ea7e1bc4969ca97c8d9851c0309e4538f

    • SHA512

      e336dedccaee99f7267f5b4bc4bb7df8bbf9917726a0ac3dc66e1eb675715868fa9c1b09f1cc9502f89e522594c58a4cc9c9dea9e12a783574320b76bba7bc0f

    • SSDEEP

      24576:OTdCjE5asQ59ZH4iKcxS1IQGMsclrxOc:O5CAIsQ59OMxS1vi8Q

    Score
    10/10
    • DarkCloud

      An information stealer written in Visual Basic.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks