Overview

overview

10

Static

static

10

4316-1364-...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4316-1364-0x0000000140000000-0x000000014007A000-memory.dmp

  • Size

    488KB

  • MD5

    df1df1d61d135900c56dcc85487416b9

  • SHA1

    9506a5559fb16d35b2d113f47cd69e230f64ebbe

  • SHA256

    b08b821ae34b3580f60e01a7e3739c4e487d4f96f3e5874f26eacf0f29aaf434

  • SHA512

    0a0e2127251ae11cdea78128a5d07fecd807bed9c8934957d9e13edad3a74ab23ccb6f31b0ce9d31bbabcdeea4d71a08cbc883c02d02805ef2083a4b72c781f2

  • SSDEEP

    6144:+MdVKz+LuaBM4/1qrbbYTsHYU6Aez8KVWIy/vI/:LLXqrH+RLT9

Score
10/10
darkvision

Malware Config

Extracted

Family

darkvision

C2

toolsdns.ddns.net

Signatures

  • Darkvision family
    darkvision
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4316-1364-0x0000000140000000-0x000000014007A000-memory.dmp
    .exe windows:5 windows x64 arch:x64


    Headers

    Sections