Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    39fee791f7ba2cc8e9b2fc2debf38ce20caba544330e24f3bc0be71fb74a0606.exe

  • Size

    1.1MB

  • Sample

    250311-dal6mayxcy

  • MD5

    49bdd09ec9be68c8e9bb329f741df24c

  • SHA1

    c22d73037643eb492f34a5294c35e07a05af56ce

  • SHA256

    39fee791f7ba2cc8e9b2fc2debf38ce20caba544330e24f3bc0be71fb74a0606

  • SHA512

    767a351c6cfc35cb498e0d75bc72092f62d17f602cb9df5e77a3cd2d4e6a7758e34a4ea9f58e671caede7c1c4f623954686c8e8496930a119f1a19a836de6c21

  • SSDEEP

    24576:V7l/k2JeK3tAbQBKWE4h6TE29iQhF3UvD6UU8b3xkd7UK:V7ZkK3ybQBK74mh3OUQxw

Malware Config

Extracted

Family

darkcloud

Attributes

Targets

    • Target

      39fee791f7ba2cc8e9b2fc2debf38ce20caba544330e24f3bc0be71fb74a0606.exe

    • Size

      1.1MB

    • MD5

      49bdd09ec9be68c8e9bb329f741df24c

    • SHA1

      c22d73037643eb492f34a5294c35e07a05af56ce

    • SHA256

      39fee791f7ba2cc8e9b2fc2debf38ce20caba544330e24f3bc0be71fb74a0606

    • SHA512

      767a351c6cfc35cb498e0d75bc72092f62d17f602cb9df5e77a3cd2d4e6a7758e34a4ea9f58e671caede7c1c4f623954686c8e8496930a119f1a19a836de6c21

    • SSDEEP

      24576:V7l/k2JeK3tAbQBKWE4h6TE29iQhF3UvD6UU8b3xkd7UK:V7ZkK3ybQBK74mh3OUQxw

    • DarkCloud

      An information stealer written in Visual Basic.

    • Darkcloud family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks