General

  • Target

    2756-13-0x0000000000400000-0x0000000000463000-memory.dmp

  • Size

    396KB

  • MD5

    1a6eceac91197741a57b1ca40b8ade1e

  • SHA1

    74e2bedf15865fd5e7b1a5e7c219567bce5fdb92

  • SHA256

    25863cf1018493280ac0cc809b57bd01e91afc692e567ab0e91b10663895c6c2

  • SHA512

    66d8a4552d3bfd271f663e9981bb7d116893d8d17f2c4ea6a65151ad33e0eed403d09f980ddbde89183fe2411b0cd0ff39ab41897f18980a227c9ea1ec468588

  • SSDEEP

    12288:jDHFaC2olusNDi49zNPdKn8yap8jYKkJj6GmZU:jDKopNi8RpyYb6nZ

Score
10/10

Malware Config

Extracted

Family

darkcloud

C2

https://api.telegram.org/bot5881209387:AAEYbMO86ewxRCF0hqbguD3F2NjXIQs4EJU/sendMessage?chat_id=1275946058

Signatures

  • Darkcloud family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2756-13-0x0000000000400000-0x0000000000463000-memory.dmp
    .exe windows:4 windows x86

    036ff0cf51a28cb9327df5ae40525457


    Headers

    Imports

    Sections