Static task
static1
Behavioral task
behavioral1
Sample
6cd21bf6382590e04c706acb435ed2e386a88688b38b90e62db4b373c4aa8fde.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
6cd21bf6382590e04c706acb435ed2e386a88688b38b90e62db4b373c4aa8fde.exe
Resource
win10v20210410
General
-
Target
6cd21bf6382590e04c706acb435ed2e386a88688b38b90e62db4b373c4aa8fde
-
Size
658KB
-
MD5
f7a9d152cbf9106561019c15d5cb096a
-
SHA1
634095863cca6cb0acdc88ddae4d22fb5946d44c
-
SHA256
6cd21bf6382590e04c706acb435ed2e386a88688b38b90e62db4b373c4aa8fde
-
SHA512
901044df24e0fd3d4743e7825141d3d46f0afca5a88e151c656aa85d750b2e6d4ffabee0171c99c320fcd2896cebf629dc40b9f47b3cce8f6bec3c31b9f56615
Malware Config
Extracted
darkcomet
Junior_Sazan
127.0.0.1:1604
DCMIN_MUTEX-E86NVH9
-
InstallPath
DCSCMIN\IMDCSC.exe
-
gencode
sGjswh3WfdnG
-
install
true
-
offline_keylogger
true
-
persistence
false
-
reg_key
Windows Defender
Signatures
-
Darkcomet family
Files
-
6cd21bf6382590e04c706acb435ed2e386a88688b38b90e62db4b373c4aa8fde.exe windows x86