Overview

overview

10

Static

static

5

66abc43d3a...af.exe

windows7-x64

10

66abc43d3a...af.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ccb43208c3913fac73586ff66702917c.bin

  • Size

    763KB

  • Sample

    240418-cdgjwahc5v

  • MD5

    48eba2b11d24a9f48d67bf8aef89adb0

  • SHA1

    08241cb853965b6b8b2d21390b0edfd6fb098573

  • SHA256

    7d8cdc06d6ddf8c2f1808b90b399dfda4360f01bf72c35eb65d6a53a349dbfd7

  • SHA512

    8037c2e9bda0a926d446c61f293dee5b40a46f99655c52d8a93a38767b28e35f323c46804b3670362f08d753142d457309d4b0cc045d603af03f287090698d98

  • SSDEEP

    12288:qLnZEPnSu/GTkswIoEsA8mk1vwRFzW4oSnybZcTeYGPra01eU3g+gh7wlU/:ayGgs1oEosW4TnybZ20IUQ/Z

Score
10/10
darkcloudstealer

Malware Config

Extracted

Family

darkcloud

Attributes
  • email_from

    igor.bos@vinoterra.ru

  • email_to

    office.tony39@mail.ru

Targets

    • Target

      66abc43d3a956272ef47201ca8b7f3e636ccef840489dac32adf72a57fb9f9af.exe

    • Size

      1.2MB

    • MD5

      ccb43208c3913fac73586ff66702917c

    • SHA1

      45d30dff3b769afe928c8cf3b555f6c85a591786

    • SHA256

      66abc43d3a956272ef47201ca8b7f3e636ccef840489dac32adf72a57fb9f9af

    • SHA512

      1c9af86fafbb5b7b46ff50d864d82c9a4ed5a953bb3d826eaf2727d26d0c69169323991cde90e7009bc2652fbb52cfd2c31b6d7e5a457b5ba031fb95f40f1395

    • SSDEEP

      24576:iAHnh+eWsN3skA4RV1Hom2KXMmHaeuEMDWbqCcWOKdNJCt7cB5:lh+ZkldoPK8YaeoW2nK7oY

    Score
    10/10
    darkcloudstealer

    • DarkCloud

      An information stealer written in Visual Basic.

      stealerdarkcloud

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks