darkcloud

General

Target
9eb48972a13c1c27cfd7f23e517321655648e5796bd26850d255d4a12b91fff9.exe
Size 1.3MB
Sample250111-e7zzestqe1
SHA256 9eb48972a13c1c27cfd7f23e517321655648e5796bd26850d255d4a12b91fff9
MD5 e706676b9deda09759817272814c77ab
SHA1 99c37b9a978d0ac96aa72092634a7dda3231e943
SHA512 855c49493ffb010eab5f1a78e2e93a8cc9e7b125530c7cbf0cfb60bd6a78b1fe2a1d4548e2e090f2a211fc38c17ba59bfde56879845b9179be0216aeeb37f4b1
SSDEEP 24576:Qtb20pkaCqT5TBWgNQ7a739C5q6hW0T4TCbjjTwA6A:ZVg5tQ7a739v6vUTCbt5
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

darkcloud

C2

https://api.telegram.org/bot7725030292:AAFHYtQUWDdOhIko2DIqyexjh4XvUaOA1Fs/sendMessage?chat_id=6732456666

Targets

- Target
  9eb48972a13c1c27cfd7f23e517321655648e5796bd26850d255d4a12b91fff9.exe
- Size 1.3MB
- SHA256 9eb48972a13c1c27cfd7f23e517321655648e5796bd26850d255d4a12b91fff9
- MD5 e706676b9deda09759817272814c77ab
- SHA1 99c37b9a978d0ac96aa72092634a7dda3231e943
- SHA512 855c49493ffb010eab5f1a78e2e93a8cc9e7b125530c7cbf0cfb60bd6a78b1fe2a1d4548e2e090f2a211fc38c17ba59bfde56879845b9179be0216aeeb37f4b1
- SSDEEP 24576:Qtb20pkaCqT5TBWgNQ7a739C5q6hW0T4TCbjjTwA6A:ZVg5tQ7a739v6vUTCbt5
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

darkcloud discovery stealer
- DarkCloud
  An information stealer written in Visual Basic.
  stealer darkcloud
- Darkcloud family
  darkcloud
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Darkcloud family

Drops startup file

Executes dropped EXE

Loads dropped DLL

AutoIT Executable

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2