General
- Target 2056-11-0x0000000000400000-0x0000000000474000-memory.dmp
- Size 464KB
- Sample240405-n23mssbb61
- SHA256 4d376e1a8b8340eba967e48aa94c6e84db16687920fbd63faa74dd98ab6a1668
- MD5 814e05fe4b25ce42b66cd6fa61d57a02
- SHA1 0e70e5d0b970a63a76b3522bac1504e8d971c836
- SHA512 bc86d008c17ebc7f1fdfee337d41d7abf7efe4dabc19089769ecd1e2d8eb094362012d429c431e8d40d3083317f8c30803ebadae9e74cf7d7c3e72dd92951200
- SSDEEP 12288:wqjZmmIW5TTpAljpWXymSVxy/GbOEhjYKkJj6GmZU:hjZyWh7yXVxQGbOyYb6nZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2056-11-0x0000000000400000-0x0000000000474000-memory.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2056-11-0x0000000000400000-0x0000000000474000-memory.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
darkcloud
C2
-
https://api.telegram.org/bot6771461481:AAH7vQEIoBDQr43Dx_zORT5cGMl9_tDt0L8/sendMessage?chat_id=6239342232
Targets
-
- Target 2056-11-0x0000000000400000-0x0000000000474000-memory.dmp
- Size 464KB
- SHA256 4d376e1a8b8340eba967e48aa94c6e84db16687920fbd63faa74dd98ab6a1668
- MD5 814e05fe4b25ce42b66cd6fa61d57a02
- SHA1 0e70e5d0b970a63a76b3522bac1504e8d971c836
- SHA512 bc86d008c17ebc7f1fdfee337d41d7abf7efe4dabc19089769ecd1e2d8eb094362012d429c431e8d40d3083317f8c30803ebadae9e74cf7d7c3e72dd92951200
- SSDEEP 12288:wqjZmmIW5TTpAljpWXymSVxy/GbOEhjYKkJj6GmZU:hjZyWh7yXVxQGbOyYb6nZ
- MD5 SHA1 SHA512 SSDEEP
Score1/10