General

  • Target

    23456b59de65acac75b184d9d5070ef19b9147180c9ec7e674c668412244b486.exe

  • Size

    481KB

  • MD5

    01bec3d503265f9afece0521343a6394

  • SHA1

    1d6886ef360d9e376aa252ec19c696b33bb513a6

  • SHA256

    23456b59de65acac75b184d9d5070ef19b9147180c9ec7e674c668412244b486

  • SHA512

    a97e1ffbd43770a0800ebdee4776676d7449577b67e91fab1d0f7059f8f36686a87db7f734efe6591c8eb85b24102cf73092fce0a2c2759aa0e890bb270e837b

  • SSDEEP

    12288:63Y1ZKPG4Uv0m7LlL/ynOFpebOIafAFHysNAdg0jYKkJj6GmZU:6+Z1vdL4b4fAZnynYb6nZ

Score
10/10

Malware Config

Extracted

Family

darkcloud

C2

https://api.telegram.org/bot5962712783:AAFVWYP7zptQlynX_9COtuxYcx3Dl7EnfUQ/sendMessage?chat_id=1644584536

Signatures

  • Darkcloud family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 23456b59de65acac75b184d9d5070ef19b9147180c9ec7e674c668412244b486.exe
    .exe windows x86

    f04087517a52194138f935fd462dce1a


    Headers

    Imports

    Sections