General
- Target c2b0cfbeb2f6924f708ce07c9f7f7225ca349833fff5171820892dc71b45bfcb
- Size 1.2MB
- Sample260604-sye5jsat9q
- SHA256 c2b0cfbeb2f6924f708ce07c9f7f7225ca349833fff5171820892dc71b45bfcb
- MD5 2da1c35a53c799147b7f6a046498951b
- SHA1 b8a408f5582a7f542fb7ba417012d77f4bea9252
- SHA512 d944b9368268f3b8afaf05531ebeec7b6b3593de4d345d78e9a0621496761cf38397eeab4cd823473d0024ff308bb63399de3f03cc72f9082576cfcf0dcf4ea6
- SSDEEP 24576:wqLPxKruNSvD1t6jmpngU0/SZilOBonsVSlEI6:wrt6SFz0/S2OBonsglEI6
- TLSH T15045BE5573F85615F1BF0BB4EA7254088AB3B95ABA20CB0F4D52940E1EB0B80DD99F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
c2b0cfbeb2f6924f708ce07c9f7f7225ca349833fff5171820892dc71b45bfcb.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
c2b0cfbeb2f6924f708ce07c9f7f7225ca349833fff5171820892dc71b45bfcb.dll
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
darthvader
C2
-
178.156.225.48:4662
-
135.181.77.225:4662
-
217.216.92.111:4662
Mutex
-
Global\RemoteControlClient_0x4ND4R1LH0
Attributes
-
client_dll
skywalker.dll
-
client_exe
Client.exe
-
deploy_token
a7f3b9c2e1d4f6a8b0c3d5e7f9a1b2c4
-
guardian_resource
MicrosoftEdgeTelemetry
-
schtask_name
MicrosoftEdgeUpdateCheck
-
servers_file
.svcdns.dat
-
tor_bundle_url
https://archive.torproject.org/tor-package-archive/torbrowser/15.0.7/tor-expert-bundle-windows-x86_64-15.0.7.tar.gz
-
web_port
8181
Targets
-
- Target c2b0cfbeb2f6924f708ce07c9f7f7225ca349833fff5171820892dc71b45bfcb
- Size 1.2MB
- SHA256 c2b0cfbeb2f6924f708ce07c9f7f7225ca349833fff5171820892dc71b45bfcb
- MD5 2da1c35a53c799147b7f6a046498951b
- SHA1 b8a408f5582a7f542fb7ba417012d77f4bea9252
- SHA512 d944b9368268f3b8afaf05531ebeec7b6b3593de4d345d78e9a0621496761cf38397eeab4cd823473d0024ff308bb63399de3f03cc72f9082576cfcf0dcf4ea6
- SSDEEP 24576:wqLPxKruNSvD1t6jmpngU0/SZilOBonsVSlEI6:wrt6SFz0/S2OBonsglEI6
- TLSH T15045BE5573F85615F1BF0BB4EA7254088AB3B95ABA20CB0F4D52940E1EB0B80DD99F73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10