Overview

overview

10

Static

static

10

df4c92e9f7...6f.exe

windows7-x64

10

df4c92e9f7...6f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    df4c92e9f70bb3929b95c2aaf8cba3aaf84cefb729ef091d48fb7e4c252c066f

  • Size

    349KB

  • MD5

    63c7e99daff85478194ee28a2055041d

  • SHA1

    50b4b78c41d06ef2fb0d1d4b7f1cf7df93917a13

  • SHA256

    df4c92e9f70bb3929b95c2aaf8cba3aaf84cefb729ef091d48fb7e4c252c066f

  • SHA512

    8d9f9288b0867005172cded073f1cb4d34e781f615dd413085114ce98a4648c5066c9129ed82b3cece63105adbcf7610d4944b6fe033b32030445c9ad3534180

  • SSDEEP

    6144:fcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37xBLLjMdWnpQZh9h4:fcW7KEZlPzCy37xlMd0QZh9u

Score
10/10
upxtest01darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

test01

C2

d4rko.zapto.org:1604

Mutex

DC_MUTEX-EDLK443

Attributes
  • InstallPath

    update.exe

  • gencode

    N5ohHCnfnvWy

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • df4c92e9f70bb3929b95c2aaf8cba3aaf84cefb729ef091d48fb7e4c252c066f
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections