Extracted

• • Target

    63fecafde6aed53ac007e7a69372eda93dfa06143552644ceee7f032886c1c58.exe

  • Size

    813KB

  • MD5

    6a4af4b23d3234eab5622ffb9f64c5fe

  • SHA1

    fdfad14c00e4fe40ea6fcdef2c42ff053ae2c1c3

  • SHA256

    63fecafde6aed53ac007e7a69372eda93dfa06143552644ceee7f032886c1c58

  • SHA512

    cf95580e39a45bb183bc71ccdb0f923a2a6d95c4048f90e55e332392d44103c97a4347eb620a772e7941f2299d0d5dd3e368211e3336c55cabefb05ef164bb02

  • SSDEEP

    24576:FxuUJuMl4s4KbiWwDHNfwus01NckbrhORP:fv74s4CiWwDtfwILcXR

  Score

  10^/10

  darkcloudstealer

  • DarkCloud

    An information stealer written in Visual Basic.

    stealerdarkcloud

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2