Overview

overview

10

Static

static

10

64f3051426...31.exe

windows7-x64

10

64f3051426...31.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    64f3051426b0920ebd89231a80a53a0e7e456252613df5fe20fc272701bbfe31

  • Size

    285KB

  • MD5

    6787d523fc543699ee564c58d8ade570

  • SHA1

    aaa349748fe1c8057cf2555db7dcd40bfb6f6ba5

  • SHA256

    64f3051426b0920ebd89231a80a53a0e7e456252613df5fe20fc272701bbfe31

  • SHA512

    e059687073ba8acf77797f483d10ab18fccb3f29e7a75ea3afb7ea6919775805eff45a1da07d4bff8a85aebe9846a13815b78df07709012dd4777a0b5ce32551

  • SSDEEP

    6144:jD7cY2fgssM7Wirg9KXylmRiL+QMeC/i6isqX7UovnONztByipwxZLT:jl8E4w5huat7UovONzbXwnT

Score
10/10
upxbykldarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

bykL

C2

baykalsunal.no-ip.biz:1604

Mutex

DC_MUTEX-W4JXEYP

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    AY3QAqG5Qahg

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 64f3051426b0920ebd89231a80a53a0e7e456252613df5fe20fc272701bbfe31
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections