General

  • Target

    8aed07e1593f87ba11f4d18a3dd8b1d2181a41784ee1c39ffbde7d87999cac45exe_JC.exe

  • Size

    443KB

  • MD5

    1d53177f8e31533cc66e072c749cb3c1

  • SHA1

    cb1d69b15336aede93e50bda49393a415069102d

  • SHA256

    8aed07e1593f87ba11f4d18a3dd8b1d2181a41784ee1c39ffbde7d87999cac45

  • SHA512

    50f500480a762c96be7472c99f332dfe1d0de45edc260dd42830a70d0b9b4fa1e4c6d88f563e7826f221e58d816d10ea855f61bd0280618ced82490943eefd2e

  • SSDEEP

    12288:DwPJ9GWTZ57Ntl8igsASlz1HO/zO/z+jYKkJj6GmZU:gGNjsASlzdOYb6nZ

Score
10/10

Malware Config

Extracted

Family

darkcloud

C2

https://api.telegram.org/bot5916623582:AAFZM5JGZCLyDWkdZ_kMmYDDwIdN1CHdEo/sendMessage?chat_id=1644584536

Signatures

  • Darkcloud family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8aed07e1593f87ba11f4d18a3dd8b1d2181a41784ee1c39ffbde7d87999cac45exe_JC.exe
    .exe windows x86

    45d1baa1912835ae6d6becac39b1a52d


    Headers

    Imports

    Sections