General
-
Target
56b237b519bf0ff53cde47321e1420800ef7f8d1f29739e8137db59050837d56
-
Size
658KB
-
Sample
220520-17k16ahhfr
-
MD5
9a10fd9402f430eaf52a7dbb562997c9
-
SHA1
7c2978c9229eb9b1a85235d164d002f84e99f005
-
SHA256
56b237b519bf0ff53cde47321e1420800ef7f8d1f29739e8137db59050837d56
-
SHA512
e8d3d11dd79bef2beaa2acc69198b5089b402fbbb1397db8a54995cb6bdea8b970c78376c77ca6810ab68bb1bf282eae34f8d6f22959952ab853aa9691602080
Behavioral task
behavioral1
Sample
56b237b519bf0ff53cde47321e1420800ef7f8d1f29739e8137db59050837d56.exe
Resource
win7-20220414-en
Malware Config
Extracted
darkcomet
Guest16
agamon888.hopto.org:1604
DC_MUTEX-15WRC0Z
-
gencode
NnWs4Qut2Lls
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
56b237b519bf0ff53cde47321e1420800ef7f8d1f29739e8137db59050837d56
-
Size
658KB
-
MD5
9a10fd9402f430eaf52a7dbb562997c9
-
SHA1
7c2978c9229eb9b1a85235d164d002f84e99f005
-
SHA256
56b237b519bf0ff53cde47321e1420800ef7f8d1f29739e8137db59050837d56
-
SHA512
e8d3d11dd79bef2beaa2acc69198b5089b402fbbb1397db8a54995cb6bdea8b970c78376c77ca6810ab68bb1bf282eae34f8d6f22959952ab853aa9691602080
-
Modifies firewall policy service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-