General

  • Target

    e545c5728ec3ad44feaecb13c8caac5f4b899418281ea83df17048e787dcb531.exe

  • Size

    4.0MB

  • MD5

    2eea32819c249793a43de83f9a2b93ac

  • SHA1

    3e072c7633fae2f149e25b96e3b3315f94428fee

  • SHA256

    e545c5728ec3ad44feaecb13c8caac5f4b899418281ea83df17048e787dcb531

  • SHA512

    0c0ad3832bc2e41edf8d99577d97c011c18a9c86fd187e27ee8986f376f284316b1b78f900aa4e31a4e532151f67e9426945afd0a1433eb30a260c71e407c4b5

  • SSDEEP

    49152:qT0IGMXuq88wrAyCRMMxmB/s4tx4zL3rEC3/eaQ6uQsI35UkiSOINRH:S5sNAkssuYC3bsI354SnH

Score
10/10

Malware Config

Extracted

Family

darkvision

C2

powercycle.ddns.net

Signatures

  • Darkvision family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e545c5728ec3ad44feaecb13c8caac5f4b899418281ea83df17048e787dcb531.exe
    .exe windows:5 windows x64 arch:x64

    baa93d47220682c04d92f7797d9224ce


    Headers

    Imports

    Sections