Behavioral task
behavioral1
Sample
b5a0eb20c754fca056b0fca57a4b7aff58ba39eab261bf68d42870f7795d8eb6.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
General
-
Target
b5a0eb20c754fca056b0fca57a4b7aff58ba39eab261bf68d42870f7795d8eb6
-
Size
658KB
-
MD5
bdf791f66075bebdfee70d793c3eaeab
-
SHA1
5742ec2efc2a5089f57445482e6fb09b0481cc7f
-
SHA256
b5a0eb20c754fca056b0fca57a4b7aff58ba39eab261bf68d42870f7795d8eb6
-
SHA512
da624cfda66301872be84ceed9b0c696705f75479b73e16c16cc519ecc8361257199bac3af16a116acf321f8c7ac82268ae29ff479e1a8ebe290034156c29fb6
Malware Config
Extracted
Family
darkcomet
Botnet
ziyaret�i
C2
sportage125.ddns.net:1604
sportagge1.ddns.net:1064
Mutex
DC_MUTEX-NPESZG3
Attributes
-
InstallPath
MSDCSC\msdcsc.exe
-
gencode
3bcPiMfDN7ts
-
install
true
-
offline_keylogger
true
-
persistence
true
-
reg_key
MicroUpdate
Signatures
-
Darkcomet family
Files
-
b5a0eb20c754fca056b0fca57a4b7aff58ba39eab261bf68d42870f7795d8eb6.exe windows x86