Static task
static1
Behavioral task
behavioral1
Sample
Anti-Virus.bin.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Anti-Virus.bin.exe
Resource
win10v20201028
0 signatures
0 seconds
General
-
Target
Anti-Virus.bin.zip
-
Size
354KB
-
MD5
471cde6cdbff959ab3f584513fb9eea2
-
SHA1
170d3f070749c48e1ce944f2d2253b16328310c5
-
SHA256
a817f840ad7e96284110c9ebecafa55f632291ab2fb48996265bc8cb7a4a9be7
-
SHA512
c68c88ccc208911d19b916795899daff53b8cf0850fe3cd50e6077f8d2038688cf8f959a51229fcd70e8baf4d17d29157fb54cc2fbb22f7625c68572d2a27c69
Score
10/10
Malware Config
Extracted
Family
darkcomet
Botnet
Anti-Virus
C2
guestanduser.no-ip.biz:1604
Mutex
DCMIN_MUTEX-7DT47PK
Attributes
-
InstallPath
DCSCMIN\IMDCSC.exe
-
gencode
9FVdx8Zdf0oG
-
install
true
-
offline_keylogger
true
-
persistence
false
-
reg_key
DarkComet RAT
Signatures
-
Darkcomet family
Files
-
Anti-Virus.bin.zip.zip
Password: infected
-
Anti-Virus.bin.exe windows x86