General

  • Target

    b22b2d1e592b4a7af634805a398222af210b9e3a35b6e2d90ae7ba53cda7d415

  • Size

    658KB

  • MD5

    012c913e751ab367e15764c21caeda17

  • SHA1

    2ed45638dd8b9730be7e1e128aad0fd89fe423e2

  • SHA256

    b22b2d1e592b4a7af634805a398222af210b9e3a35b6e2d90ae7ba53cda7d415

  • SHA512

    9a3a8136fcf6d9e30c8d7cc97d1fbe5bbfe4326cc1891232027348666fb89b81c218638e42ded7df294e84a3b85b423c6ee51138d55c89d284d8f3792bc0a514

  • SSDEEP

    12288:S9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZK3/XAq:+iBIGkbxqEcjsWiDxguehC2+wq

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Hello

C2

wbbebe.ddns.net:1604

Mutex

DC_MUTEX-LMU8FMS

Attributes
  • InstallPath

    MSDCSC\svchost.exe

  • gencode

    puGMcKAsuLmD

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

Files

  • b22b2d1e592b4a7af634805a398222af210b9e3a35b6e2d90ae7ba53cda7d415
    .exe windows x86


    Headers

    Sections