General
-
Target
2076-2-0x0000000000400000-0x0000000000A66000-memory.dmp
-
Size
6.4MB
-
MD5
821fbf1cb275030eb449f2c5290cdd37
-
SHA1
e460ac1236a8c407a3ecc994b07e6698342cb0ad
-
SHA256
9d3697cc644d5ad01b1def3df1c4f17cc768fefe47acf1f32826d77ef9976590
-
SHA512
54d9010219e5835fd50750957dfe6885399e8076ead05e58b90155856c95dde5b109fc5f9659c879b395e259015b23c75255a547e5ab257f91f88546d21f7f0f
-
SSDEEP
98304:9vD99re2J0FhJW0PUT2VNT9Nob1tY73myju2NLv+ZtQBRLLomoUMMd0GLXz:9vD99rEnZNz3m2v+DQBxLomozMuu
Score
10/10
Malware Config
Extracted
Family
darkcloud
C2
https://api.telegram.org/bot6361371678:AAH7b9uIkhwP1TBt8t78VwxXD7LXjsOcbYk/sendMessage?chat_id=5527518337
Signatures
-
Darkcloud family
-
Themida packer 1 IoCs
Detects Themida, an advanced Windows software protection system.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2076-2-0x0000000000400000-0x0000000000A66000-memory.dmp
Headers
Sections