Overview

overview

10

Static

static

5

ccb43208c3...7c.exe

windows7-x64

10

ccb43208c3...7c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ccb43208c3913fac73586ff66702917c.exe

  • Size

    1.2MB

  • Sample

    240416-s5xm6sdh48

  • MD5

    ccb43208c3913fac73586ff66702917c

  • SHA1

    45d30dff3b769afe928c8cf3b555f6c85a591786

  • SHA256

    66abc43d3a956272ef47201ca8b7f3e636ccef840489dac32adf72a57fb9f9af

  • SHA512

    1c9af86fafbb5b7b46ff50d864d82c9a4ed5a953bb3d826eaf2727d26d0c69169323991cde90e7009bc2652fbb52cfd2c31b6d7e5a457b5ba031fb95f40f1395

  • SSDEEP

    24576:iAHnh+eWsN3skA4RV1Hom2KXMmHaeuEMDWbqCcWOKdNJCt7cB5:lh+ZkldoPK8YaeoW2nK7oY

Score
10/10
darkcloudstealer

Malware Config

Extracted

Family

darkcloud

Attributes
  • email_from

    igor.bos@vinoterra.ru

  • email_to

    office.tony39@mail.ru

Targets

    • Target

      ccb43208c3913fac73586ff66702917c.exe

    • Size

      1.2MB

    • MD5

      ccb43208c3913fac73586ff66702917c

    • SHA1

      45d30dff3b769afe928c8cf3b555f6c85a591786

    • SHA256

      66abc43d3a956272ef47201ca8b7f3e636ccef840489dac32adf72a57fb9f9af

    • SHA512

      1c9af86fafbb5b7b46ff50d864d82c9a4ed5a953bb3d826eaf2727d26d0c69169323991cde90e7009bc2652fbb52cfd2c31b6d7e5a457b5ba031fb95f40f1395

    • SSDEEP

      24576:iAHnh+eWsN3skA4RV1Hom2KXMmHaeuEMDWbqCcWOKdNJCt7cB5:lh+ZkldoPK8YaeoW2nK7oY

    Score
    10/10
    darkcloudstealer

    • DarkCloud

      An information stealer written in Visual Basic.

      stealerdarkcloud

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks