Overview

overview

10

Static

static

3

ЗАПИТ...Т.exe

windows7-x64

10

ЗАПИТ...Т.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ЗАПИТВАНЕ ЗА ПРОДУКТ.exe

  • Size

    2.4MB

  • Sample

    240508-jdxpeshd81

  • MD5

    69182c28695e5f9bfb3bcd99ab0afea5

  • SHA1

    c1d64ed49a2d3adf4d89a53444afc88c0c405534

  • SHA256

    0968b8105a936a18e61bdfbeb022c5baae9d9af67070dd26747e93eff64f5b2b

  • SHA512

    35baf9f36a744c1045d7acec6d3f9a902031d42f19d3628f5eca19abb4152af06452645bd001f4d1059819aa84eddeef59cdec223e3263dcf786ca41079335ac

  • SSDEEP

    24576:1B5dUhI4kKqFas04BSWQ+ChB4ejpyenYWcoEGpTBNf01W7cqSOOd/:1veqKqFasLf/+pbxLpTffH7UO+

Score
10/10
darkcloudstealer

Malware Config

Extracted

Family

darkcloud

C2

https://api.telegram.org/bot6800672014:AAFjIhthNxpYeDLxh4u9CJvqMfisOhMGH6M/sendMessage?chat_id=6542615755

Targets

    • Target

      ЗАПИТВАНЕ ЗА ПРОДУКТ.exe

    • Size

      2.4MB

    • MD5

      69182c28695e5f9bfb3bcd99ab0afea5

    • SHA1

      c1d64ed49a2d3adf4d89a53444afc88c0c405534

    • SHA256

      0968b8105a936a18e61bdfbeb022c5baae9d9af67070dd26747e93eff64f5b2b

    • SHA512

      35baf9f36a744c1045d7acec6d3f9a902031d42f19d3628f5eca19abb4152af06452645bd001f4d1059819aa84eddeef59cdec223e3263dcf786ca41079335ac

    • SSDEEP

      24576:1B5dUhI4kKqFas04BSWQ+ChB4ejpyenYWcoEGpTBNf01W7cqSOOd/:1veqKqFasLf/+pbxLpTffH7UO+

    Score
    10/10
    darkcloudstealer

    • DarkCloud

      An information stealer written in Visual Basic.

      stealerdarkcloud

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks