Overview

overview

10

Static

static

a26bba4bbd...7c.exe

windows7-x64

10

a26bba4bbd...7c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a26bba4bbd4fb44a01f7ef62499c38031a11a4609b3aa3d2af93d7e2f264d27c

  • Size

    869KB

  • Sample

    221001-2bnmvabcbm

  • MD5

    78dd32ed5994259933ea73aa288a8cb0

  • SHA1

    cce677fd39f4de39b94330991c51c7cc2c305fcc

  • SHA256

    a26bba4bbd4fb44a01f7ef62499c38031a11a4609b3aa3d2af93d7e2f264d27c

  • SHA512

    723dc66b92571a3658019b2ce013ab6a0d66e94fe0ff5a310060f8c359f413113e1faf9ef4da8206b2dc78c030cd77488f463a3f3536a09db2273ac7e5f50518

  • SSDEEP

    12288:Sr6XkQawWwBcMM2zUUBwP6Dc9+zKa/I71ytZIcq+71GhJ8YwUgnrCjJbnV:SWXkQ5cMMviDc9+O7paIcqzbyy

Score
10/10
darkcometguest16evasionrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

flix4u.3utilities.com:1604

Mutex

DC_MUTEX-6FSSTJ2

Attributes
  • gencode

    VTBvSXJLwSoT

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      a26bba4bbd4fb44a01f7ef62499c38031a11a4609b3aa3d2af93d7e2f264d27c

    • Size

      869KB

    • MD5

      78dd32ed5994259933ea73aa288a8cb0

    • SHA1

      cce677fd39f4de39b94330991c51c7cc2c305fcc

    • SHA256

      a26bba4bbd4fb44a01f7ef62499c38031a11a4609b3aa3d2af93d7e2f264d27c

    • SHA512

      723dc66b92571a3658019b2ce013ab6a0d66e94fe0ff5a310060f8c359f413113e1faf9ef4da8206b2dc78c030cd77488f463a3f3536a09db2273ac7e5f50518

    • SSDEEP

      12288:Sr6XkQawWwBcMM2zUUBwP6Dc9+zKa/I71ytZIcq+71GhJ8YwUgnrCjJbnV:SWXkQ5cMMviDc9+O7paIcqzbyy

    Score
    10/10
    darkcometguest16evasionrattrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Disabling Security Tools

2
T1089

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks