General

  • Target

    b5a0eb20c754fca056b0fca57a4b7aff58ba39eab261bf68d42870f7795d8eb6

  • Size

    658KB

  • MD5

    bdf791f66075bebdfee70d793c3eaeab

  • SHA1

    5742ec2efc2a5089f57445482e6fb09b0481cc7f

  • SHA256

    b5a0eb20c754fca056b0fca57a4b7aff58ba39eab261bf68d42870f7795d8eb6

  • SHA512

    da624cfda66301872be84ceed9b0c696705f75479b73e16c16cc519ecc8361257199bac3af16a116acf321f8c7ac82268ae29ff479e1a8ebe290034156c29fb6

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

ziyaret�i

C2

sportage125.ddns.net:1604

sportagge1.ddns.net:1064

Mutex

DC_MUTEX-NPESZG3

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    3bcPiMfDN7ts

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

Files

  • b5a0eb20c754fca056b0fca57a4b7aff58ba39eab261bf68d42870f7795d8eb6
    .exe windows x86