Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    8f3e95019dfd1caa9f174df58f9b8c097e66cb655551c18fe94067f371d9b045.exe

  • Size

    890KB

  • Sample

    250311-emmtcs1wgz

  • MD5

    77f5fec4ab36cbc857af81b4051a205b

  • SHA1

    66faae41226e0d364e6ceaa1fbf5eabb1d5274b3

  • SHA256

    8f3e95019dfd1caa9f174df58f9b8c097e66cb655551c18fe94067f371d9b045

  • SHA512

    41cb4afffd7dfff23701fd861b743dabb8803b4d053ea3e000a5f912887474b3f43c64e1f922d5f814debabe17ef3302951228ce0c6170955dbf72c01105448a

  • SSDEEP

    24576:5MrbZRDq373Q7EQihjBQt0pfH7tHrbXqu1mTM:5MXfOzvjBQt0Zbh

Malware Config

Extracted

Family

darkcloud

Attributes

Targets

    • Target

      8f3e95019dfd1caa9f174df58f9b8c097e66cb655551c18fe94067f371d9b045.exe

    • Size

      890KB

    • MD5

      77f5fec4ab36cbc857af81b4051a205b

    • SHA1

      66faae41226e0d364e6ceaa1fbf5eabb1d5274b3

    • SHA256

      8f3e95019dfd1caa9f174df58f9b8c097e66cb655551c18fe94067f371d9b045

    • SHA512

      41cb4afffd7dfff23701fd861b743dabb8803b4d053ea3e000a5f912887474b3f43c64e1f922d5f814debabe17ef3302951228ce0c6170955dbf72c01105448a

    • SSDEEP

      24576:5MrbZRDq373Q7EQihjBQt0pfH7tHrbXqu1mTM:5MXfOzvjBQt0Zbh

    • DarkCloud

      An information stealer written in Visual Basic.

    • Darkcloud family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks