General

  • Target

    dd86228f22a372a870efd571580bd2800c79f502a70a9b47aab2bdb10ca5766b.exe

  • Size

    4.0MB

  • MD5

    247e35b36f1fa7310918e3bf28ce0298

  • SHA1

    3069f557958742358302fcc216f3c80517733c22

  • SHA256

    dd86228f22a372a870efd571580bd2800c79f502a70a9b47aab2bdb10ca5766b

  • SHA512

    d702adb486eeaf270ee0904a5d6ef277025414bf050d392766763b49fa5b675939435913be7e57592757eb6d2c9f5ec93352b0714a1869fc2d71c3cb42f8495f

  • SSDEEP

    49152:GHC3lll91kgrtu/Q+CSj2BUKWXBt1eHx/G039ygNHhPguc:NB1NgnNj2BqX7B03sgNHhl

Score
10/10

Malware Config

Extracted

Family

darkvision

C2

powercycle.ddns.net

Signatures

  • Darkvision family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dd86228f22a372a870efd571580bd2800c79f502a70a9b47aab2bdb10ca5766b.exe
    .exe windows:5 windows x64 arch:x64

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Sections