General

  • Target

    Anti-Virus.bin.zip

  • Size

    354KB

  • MD5

    471cde6cdbff959ab3f584513fb9eea2

  • SHA1

    170d3f070749c48e1ce944f2d2253b16328310c5

  • SHA256

    a817f840ad7e96284110c9ebecafa55f632291ab2fb48996265bc8cb7a4a9be7

  • SHA512

    c68c88ccc208911d19b916795899daff53b8cf0850fe3cd50e6077f8d2038688cf8f959a51229fcd70e8baf4d17d29157fb54cc2fbb22f7625c68572d2a27c69

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Anti-Virus

C2

guestanduser.no-ip.biz:1604

Mutex

DCMIN_MUTEX-7DT47PK

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    9FVdx8Zdf0oG

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    DarkComet RAT

Signatures

Files

  • Anti-Virus.bin.zip
    .zip

    Password: infected

  • Anti-Virus.bin
    .exe windows x86