darkcomet | 2d8b82b2b88b76d8a70703f41fdf182130620b5ef011af8d5fa36cc94d0c87ef

General

Target
2d8b82b2b88b76d8a70703f41fdf182130620b5ef011af8d5fa36cc94d0c87ef
Size 1.0MB
Sample221004-a1tfvaecg2
SHA256 2d8b82b2b88b76d8a70703f41fdf182130620b5ef011af8d5fa36cc94d0c87ef
MD5 3763b04164975d22245deb083a409bdd
SHA1 bf632670c039d27a6597a7ab518cdc9214b9f851
SHA512 154017f30df6a66a0fdf5ca8a4ed1e5f506d96d30d91e9db985dc5afa225ccca997eb3f4fb6780c1ad4738e38bd50fc89ee0c25dd6680ca9065ede2e3bafb8f4
SSDEEP 24576:h50QRWoJEfg0oChGdJQbjPbNW5tYeP+GF1OESmO0A:hmQRV2o3MPY5AX3
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

darkcomet

Malware Config

Signatures

Darkcomet family
darkcomet

File Explorer

2d8b82b2b88b76d8a70703f41fdf182130620b5ef011af8d5fa36cc94d0c87ef

.exe 1.0MB

2d8b82b2b88b76d8a70703f41fdf182130620b5ef011af8d5fa36cc94d0c87ef

IMPHASH 9222d372923baed7aa9dfa28449a94ea
SHA256 2d8b82b2b88b76d8a70703f41fdf182130620b5ef011af8d5fa36cc94d0c87ef
MD5 3763b04164975d22245deb083a409bdd
SHA1 bf632670c039d27a6597a7ab518cdc9214b9f851
SHA512 154017f30df6a66a0fdf5ca8a4ed1e5f506d96d30d91e9db985dc5afa225ccca997eb3f4fb6780c1ad4738e38bd50fc89ee0c25dd6680ca9065ede2e3bafb8f4
SSDEEP 24576:h50QRWoJEfg0oChGdJQbjPbNW5tYeP+GF1OESmO0A:hmQRV2o3MPY5AX3
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

12872

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileA FindResourceA FreeLibrary LoadResource WriteFile SizeofResource GetProcAddress LoadLibraryA LockResource EnumResourceNamesA CloseHandle FreeResource GetWindowsDirectoryA OutputDebugStringA GetTempPathA GetModuleHandleW ExitProcess DecodePointer EncodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameW Sleep HeapSize GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LCMapStringW MultiByteToWideChar GetStringTypeW

shell32

ShellExecuteA SHGetSpecialFolderPathA

Sharing