General

  • Target

    0faa51f3a48ef1ddc78f3efb76dd9c8840334088e40375fd5e47be5f9333503f

  • Size

    447KB

  • MD5

    cb1209bfc73135ff41c56b03f07f3a2a

  • SHA1

    906998c70230abbc782b35580181948b2bc98875

  • SHA256

    0faa51f3a48ef1ddc78f3efb76dd9c8840334088e40375fd5e47be5f9333503f

  • SHA512

    0be65446adc193647f6ff28da830c573674145af839abadfc7152f91621c3ab2f87eeb3f6d50f361407ede1045d4f263ce231ee9b7f14438756c157df592ccdc

  • SSDEEP

    12288:t7AjQ4WDymNVwDXGId0wbWJ8hvjYKkJj6GmZU:pt4WLU0wXYb6nZ

Score
10/10

Malware Config

Extracted

Family

darkcloud

C2

https://api.telegram.org/bot6625119733:AAGsRrDm4B0BMW4eVG-v0GyODnlzsf2wzzg/sendMessage?chat_id=5353496422

Signatures

  • Darkcloud family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0faa51f3a48ef1ddc78f3efb76dd9c8840334088e40375fd5e47be5f9333503f
    .exe windows:4 windows x86

    6039e8b6b7cbac88d3a47d5e2afa619f


    Headers

    Imports

    Sections