darkcomet | 04ecc8a39bb1236fb737256d4438f3781141a95d8d55576bd1a7e17a0c8b5aa0 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
04ecc8a39bb1236fb737256d4438f3781141a95d8d55576bd1a7e17a0c8b5aa0
Size 658KB
Sample201109-x96dr69vsn
SHA256 04ecc8a39bb1236fb737256d4438f3781141a95d8d55576bd1a7e17a0c8b5aa0
MD5 8be33a14d056b3fa353ef25d992b6055
SHA1 94eea24e843ca0920f5cf50c42070ede4f07fb00
SHA512 30915b0e90814edcb7dec86653d1da1b512124c290736fe642ce87d7d18cf7f10175cf1c18e37b15948edc7b3eae0899e4e8a0964f7908a19c10d2d9df629ff5
MD5 SHA1 SHA512

Score

10^/10

guest darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest

C2

ediserver.ddns.net:1604

Mutex

DC_MUTEX-P4MPQBE

Attributes

gencode
VEuAkhWatVtp
install
false
offline_keylogger
true
persistence
false

Signatures

Darkcomet family
darkcomet

File Explorer

04ecc8a39bb1236fb737256d4438f3781141a95d8d55576bd1a7e17a0c8b5aa0

.exe 658KB

04ecc8a39bb1236fb737256d4438f3781141a95d8d55576bd1a7e17a0c8b5aa0

SHA256 04ecc8a39bb1236fb737256d4438f3781141a95d8d55576bd1a7e17a0c8b5aa0
MD5 8be33a14d056b3fa353ef25d992b6055
SHA1 94eea24e843ca0920f5cf50c42070ede4f07fb00
SHA512 30915b0e90814edcb7dec86653d1da1b512124c290736fe642ce87d7d18cf7f10175cf1c18e37b15948edc7b3eae0899e4e8a0964f7908a19c10d2d9df629ff5
MD5 SHA1 SHA512

windows x86