Overview

overview

10

Static

static

10

c7b457e687...dd.exe

windows7-x64

10

c7b457e687...dd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c7b457e68710cf9def05d3334c4feada674fde0642e6553a81faec21f30380dd

  • Size

    349KB

  • MD5

    641126dc8000b6a7a7c1817b1d4ce4c0

  • SHA1

    b7213b63d9d81257d40b22b26efc519538d0cf81

  • SHA256

    c7b457e68710cf9def05d3334c4feada674fde0642e6553a81faec21f30380dd

  • SHA512

    d93af2fa3162264b7e3d553e0cfa63bead217a065242d5ee3a6d1c442482c8cd4a2961f89ca9f6ec20127d355ddf9562d9d902e370691d9c793eb3db828cede3

  • SSDEEP

    6144:GcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37RcY5AqGI1MzCgc:GcW7KEZlPzCy37X5Aqz1ECg

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

ilovemyself.no-ip.info:1604

Mutex

DC_MUTEX-SRXLT85

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    qfkwJPTeFCGR

  • install

    true

  • offline_keylogger

    false

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • c7b457e68710cf9def05d3334c4feada674fde0642e6553a81faec21f30380dd
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections