General

  • Target

    4284-185-0x0000000000400000-0x0000000000462000-memory.dmp

  • Size

    392KB

  • MD5

    29debac50bd3f6ff9f46304fd1a9043b

  • SHA1

    c05df90a0ceb05c4dc6001082ce0ffaa44065a6f

  • SHA256

    2e6fa64d91f5c0430606b9050429e53cea1c96d9f321974f0d50874bb75ee16e

  • SHA512

    ecd15f7e6286653d76ddd7f19812e12db17188bbe340769862e87f61d3140da8be25e40cb137009189406b9aa172dac634706f429f8cc2f4844ba6d4797d11c9

  • SSDEEP

    12288:AyO1n8tPGkb8jW458fIaif8cqYUjYKkJj6GmZU:A11AGEA8cqYqYb6nZ

Score
10/10

Malware Config

Extracted

Family

darkcloud

C2

https://api.telegram.org/bot6398598832:AAHm_-Bk4WvgvnFiJw5HCNBQ9z3BfEFNArM/sendMessage?chat_id=5713547588

Signatures

  • Darkcloud family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4284-185-0x0000000000400000-0x0000000000462000-memory.dmp
    .exe windows x86

    89b21174058ea7b8cc78137f4b0d3efd


    Headers

    Imports

    Sections