General

  • Target

    731bf93dd8c38122503a1d07c57060bfbbeb0456f6148762dabd8481982f6a2c

  • Size

    690KB

  • MD5

    b5bdc77d7de04cee9d59999367b19759

  • SHA1

    362fb65eb92228033d0f1f263ad26a33a43a443f

  • SHA256

    731bf93dd8c38122503a1d07c57060bfbbeb0456f6148762dabd8481982f6a2c

  • SHA512

    ad4e94c0a3fdc48efde1294d54004c89f07b36bb109a41826942a018b44030690a4d381e26992082dedd3dcfbe05c6ed4ef4523b11ea7758fc6691a00a8cb195

  • SSDEEP

    12288:W9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZK3/X3:yiBIGkbxqEcjsWiDxguehC2+

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Yarik

C2

kolgah.ddns.net:1604

Mutex

DC_MUTEX-YM0NEUT

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    pozsQkwcSLKX

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

Files

  • 731bf93dd8c38122503a1d07c57060bfbbeb0456f6148762dabd8481982f6a2c
    .exe windows x86


    Headers

    Sections