Overview

overview

10

Static

static

10

a3864430c9...2c.exe

windows7-x64

10

a3864430c9...2c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3864430c9d9e4b70c2e071d11ef0d63c019c1286959ba8aa2cfa32431bdbe2c

  • Size

    344KB

  • MD5

    6756463bd85c7c3338abe86d6af11f50

  • SHA1

    a090be83109742e6dc35f3a8b8f48bcb49a127d6

  • SHA256

    a3864430c9d9e4b70c2e071d11ef0d63c019c1286959ba8aa2cfa32431bdbe2c

  • SHA512

    1f9e9dc13fc9d649f98d33f19fb23d951a3a804fee33ddcbe5245ea62769dd7a2861ae844fad0b1cfd611c2f39ca87619dd538064298e2e5296a9c9c788379ed

  • SSDEEP

    6144:3cNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37KYdIN3gOTg7r6e:3cW7KEZlPzCy37pdINQOTg73

Score
10/10
upxspydarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Spy

C2

6atters.sytes.net:1604

6atters.sytes.net:81

185.3.33.188:81

185.3.33.188:1604

25.70.87.3:1604

25.70.87.3:81

10.0.2.15:1604

10.0.2.15:81
Mutex

DC_MUTEX-YCCLTLD

Attributes
  • InstallPath

    svchost.exe

  • gencode

    Zso0haJniuNx

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    Microsoft

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • a3864430c9d9e4b70c2e071d11ef0d63c019c1286959ba8aa2cfa32431bdbe2c
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections