DarkCloud Stealer malware
DarkCloud Stealer is a malware family identified by Malva.RE's static analysis engine through dedicated YARA rules and collectors.
Malva.RE has analysed 12 public samples tagged DarkCloud Stealer, statically and without execution. The latest public sample was seen on 2026-10-19.
File types
- VB5/6 Executable12
Recurring C2 endpoints
mail[.]mokasco[.]com11
Defanged. Extracted statically from the configurations of public samples.
Latest public DarkCloud Stealer samples
Analyse your own DarkCloud Stealer sample
Malva.RE unpacks, decompiles and extracts the configuration of suspicious files statically — the file is never executed. Free-plan reports are public.
Analyse a file for free