General
-
Target
6bd08d58966c74dc2a5bf37e649b154a160656f1a785ae20d306650e30b5abb5
-
Size
748KB
-
Sample
220919-q8va4sbgd2
-
MD5
0ad470e99085fbeb5082688adf55e8b5
-
SHA1
f6841dc30255770e26d9338d6ed18ee8768cf870
-
SHA256
6bd08d58966c74dc2a5bf37e649b154a160656f1a785ae20d306650e30b5abb5
-
SHA512
40fbe8a54521c99a65e9fbc0eeca4b51e91781fe73855c2af077b75d891bc53872a1e9c5a45ff0a942f4f098060756b37bcb62779c3675844fb63d94ab4ba32a
-
SSDEEP
12288:vbyCXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy4n:NnAw2WWeFcfbP9VPSPMTSPL/rWvzq4Jv
Behavioral task
behavioral1
Sample
6bd08d58966c74dc2a5bf37e649b154a160656f1a785ae20d306650e30b5abb5.exe
Resource
win7-20220812-en
Malware Config
Extracted
darkcomet
Guest16
megabit10.no-ip.biz:1604
DC_MUTEX-7ENZQGM
-
gencode
SJARHgaMCGfW
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
6bd08d58966c74dc2a5bf37e649b154a160656f1a785ae20d306650e30b5abb5
-
Size
748KB
-
MD5
0ad470e99085fbeb5082688adf55e8b5
-
SHA1
f6841dc30255770e26d9338d6ed18ee8768cf870
-
SHA256
6bd08d58966c74dc2a5bf37e649b154a160656f1a785ae20d306650e30b5abb5
-
SHA512
40fbe8a54521c99a65e9fbc0eeca4b51e91781fe73855c2af077b75d891bc53872a1e9c5a45ff0a942f4f098060756b37bcb62779c3675844fb63d94ab4ba32a
-
SSDEEP
12288:vbyCXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy4n:NnAw2WWeFcfbP9VPSPMTSPL/rWvzq4Jv
-
Suspicious use of SetThreadContext
-