Behavioral task
behavioral1
Sample
a70e2b46ebb363cb0c07bbac058096b337510dc6cfd3bebd7c8ba2c2965b948b.exe
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a70e2b46ebb363cb0c07bbac058096b337510dc6cfd3bebd7c8ba2c2965b948b.exe
Resource
win10v20210410
windows10_x64
0 signatures
0 seconds
General
-
Target
a70e2b46ebb363cb0c07bbac058096b337510dc6cfd3bebd7c8ba2c2965b948b
-
Size
690KB
-
MD5
27593b60c26da879d8e0f6c5ce8b3c3c
-
SHA1
e050280ed8225f06c61f11b22ee9bdc32aac2777
-
SHA256
a70e2b46ebb363cb0c07bbac058096b337510dc6cfd3bebd7c8ba2c2965b948b
-
SHA512
17d74c7b47bfad005a6726388509fb996d126a721d20d43d61a550261f57942dcc2e74bbad78e96e0a83ebacd92eac1160f720b82630b30d16e5b438a35589ee
Malware Config
Extracted
Family
darkcomet
Botnet
PB+RP
C2
react1on.no-ip.biz:1004
Mutex
DC_MUTEX-9Z9HPRZ
Attributes
-
InstallPath
MSDCSC\msdcsc.exe
-
gencode
bfAgAtl5pkim
-
install
true
-
offline_keylogger
true
-
persistence
true
-
reg_key
MicroUpdate
Signatures
-
Darkcomet family
Files
-
a70e2b46ebb363cb0c07bbac058096b337510dc6cfd3bebd7c8ba2c2965b948b.exe windows x86