General

  • Target

    4f5f044bffa102a6cf581013abd91f2c799151f73430fdd4e99d1eb691b51682.exe

  • Size

    382KB

  • MD5

    d481de8e3f2e0c40b943e3fa606eea29

  • SHA1

    9c84feab6df65ab17fef55baa0dbd0548d62b452

  • SHA256

    4f5f044bffa102a6cf581013abd91f2c799151f73430fdd4e99d1eb691b51682

  • SHA512

    a6890bf787ee76c2589890f96c4442fa2c9246b492b8d650acdb6512c1403daac1605e6005c08027b9e36409033bf597e2461c89d9dd7049b180ff2f834ece24

  • SSDEEP

    6144:NNVnDSy3e+LZu7Zs8zXqjHEWpJrblJcoJXJQhyu6PIynHh8d1/w5KA81IJ8GpF6e:NDq0ZuqGXqjHEWptxJChyVdqjYKkJj6e

Score
10/10

Malware Config

Extracted

Family

darkcloud

C2

https://api.telegram.org/bot6028253602:AAFFbacUfiOxmvzuo36D6g83Flf23bpPXYA/sendMessage?chat_id=5954758350

Signatures

  • Darkcloud family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f5f044bffa102a6cf581013abd91f2c799151f73430fdd4e99d1eb691b51682.exe
    .exe windows x86

    3f705a7c633fffd87c936a8b2631752c


    Headers

    Imports

    Sections