General
-
Target
77af302242f3b0036f6156e0bc52de70286320e5b6ffeec688fffbc67124dde8
-
Size
1.5MB
-
Sample
201109-bvatxj6g52
-
MD5
6fe13c3acf1aa29ad394003165a1196a
-
SHA1
7d3854a4c908aa96c06abc4ba928306364e31fe5
-
SHA256
77af302242f3b0036f6156e0bc52de70286320e5b6ffeec688fffbc67124dde8
-
SHA512
574355399c3765ae62079a2a807147da6d28db7691c2c6bba862ee0991091829be7c2ca521cf8057cd37738572a209ee98aad4bda7fdc0818f7ee06e60bc7c81
Static task
static1
Behavioral task
behavioral1
Sample
77af302242f3b0036f6156e0bc52de70286320e5b6ffeec688fffbc67124dde8.exe
Resource
win7v20201028
Malware Config
Extracted
darkcomet
Runescape
mrsnickers03.no-ip.biz:340
DC_MUTEX-6ZFK11A
-
gencode
uNwew4gojxtu
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
77af302242f3b0036f6156e0bc52de70286320e5b6ffeec688fffbc67124dde8
-
Size
1.5MB
-
MD5
6fe13c3acf1aa29ad394003165a1196a
-
SHA1
7d3854a4c908aa96c06abc4ba928306364e31fe5
-
SHA256
77af302242f3b0036f6156e0bc52de70286320e5b6ffeec688fffbc67124dde8
-
SHA512
574355399c3765ae62079a2a807147da6d28db7691c2c6bba862ee0991091829be7c2ca521cf8057cd37738572a209ee98aad4bda7fdc0818f7ee06e60bc7c81
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-