General
-
Target
5cd2cf4667cb58941698b9777e76eb3ae9e3454c03ff337dc569481ec9a9fd61
-
Size
288KB
-
Sample
220801-fvmzrsccfm
-
MD5
a7bad7d93f16b3d325cf7d8935b9a7e0
-
SHA1
4e2b8b29b47c16fbea3d80e48f17922b519c4671
-
SHA256
5cd2cf4667cb58941698b9777e76eb3ae9e3454c03ff337dc569481ec9a9fd61
-
SHA512
5a4025a7a0e47a1d6147760207cbcd3ea8fecbc7947d326e34aa381ccd28173052e69766ebc8beb659816989822e8178255ecfb73eab0c7be6d4d18ed9df2afc
Static task
static1
Behavioral task
behavioral1
Sample
5cd2cf4667cb58941698b9777e76eb3ae9e3454c03ff337dc569481ec9a9fd61.exe
Resource
win7-20220715-en
Malware Config
Extracted
darkcomet
ÖÍíÉ
yasserr.no-ip.biz:1600
DC_MUTEX-L4W8GMZ
-
gencode
YHXRle1HaV3y
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
5cd2cf4667cb58941698b9777e76eb3ae9e3454c03ff337dc569481ec9a9fd61
-
Size
288KB
-
MD5
a7bad7d93f16b3d325cf7d8935b9a7e0
-
SHA1
4e2b8b29b47c16fbea3d80e48f17922b519c4671
-
SHA256
5cd2cf4667cb58941698b9777e76eb3ae9e3454c03ff337dc569481ec9a9fd61
-
SHA512
5a4025a7a0e47a1d6147760207cbcd3ea8fecbc7947d326e34aa381ccd28173052e69766ebc8beb659816989822e8178255ecfb73eab0c7be6d4d18ed9df2afc
-
Suspicious use of SetThreadContext
-