Static task
static1
Behavioral task
behavioral1
Sample
802b67f035f6b75aa99b4c04c7701ca80f132ec5007d066f04c174e304423f94.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
802b67f035f6b75aa99b4c04c7701ca80f132ec5007d066f04c174e304423f94.exe
Resource
win10v20210408
General
-
Target
802b67f035f6b75aa99b4c04c7701ca80f132ec5007d066f04c174e304423f94
-
Size
797KB
-
MD5
2ca8be7c1b7b9d4addcdd8643b37faf8
-
SHA1
4282592b2dda12b1385575b7686e741e5af9e178
-
SHA256
802b67f035f6b75aa99b4c04c7701ca80f132ec5007d066f04c174e304423f94
-
SHA512
b81531ded14a93fa7a6136ce721bc79cc113b4745d226acddb73067d5f628469820eb40b233b0de2fe5526c413914b51f24ec4533710b19d37842d307a754f93
Malware Config
Extracted
darkcomet
enayi avc�s�
8.tcp.ngrok.io:18922
8.tcp.ngrok.io:11390
DC_MUTEX-JJADN00
-
InstallPath
MSDCSC\msdcsc.exe
-
gencode
LHGZ2Ktc5bFu
-
install
true
-
offline_keylogger
true
-
persistence
true
-
reg_key
Owo Para
Signatures
-
Darkcomet family
Files
-
802b67f035f6b75aa99b4c04c7701ca80f132ec5007d066f04c174e304423f94.exe windows x86