Static task
static1
Behavioral task
behavioral1
Sample
FOTOVERANO15.scr
Resource
win7v20210410
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
FOTOVERANO15.scr
Resource
win10v20210410
windows10_x64
0 signatures
0 seconds
General
-
Target
FOTOVERANO15.scr
-
Size
874KB
-
MD5
ec692bde91ad1c6e182843bc0a5c7e81
-
SHA1
54996c1d4aeaf76855b7b73a323b74c191573863
-
SHA256
de19d8ea2911ff7e337823576e214151ad4426206db8e9ea9880778f2592f935
-
SHA512
4b4d5b7707071b86cb2d55411766bb3ebde9a8765becdaf5840d78be6e278f5b3d2bbe2888350a4d113c49a65c9b8e2ec818429db91c72529b0fbfd12f9c7dbe
Score
10/10
Malware Config
Extracted
Family
darkcomet
Botnet
FOTOVERANO15
C2
seguridadsocial.ddns.net:1604
Mutex
DC_MUTEX-MKHPJPY
Attributes
-
InstallPath
MSDCSC\msdcsc.exe
-
gencode
lsBsa7lPZ9Fu
-
install
true
-
offline_keylogger
true
-
persistence
true
-
reg_key
MicroUpdate
Signatures
-
Darkcomet family
Files
-
FOTOVERANO15.scr.exe windows x86