General

  • Target

    0cfc033a43500bc9b481cbfc7354e5ad2c97194f1b5ac4765254eda04ae5f6d3

  • Size

    258KB

  • MD5

    31ae9f39179dacc884d375dbab816a25

  • SHA1

    3fe7a1f0cf712e7ed66a94bbd07a519f902b9cbf

  • SHA256

    0cfc033a43500bc9b481cbfc7354e5ad2c97194f1b5ac4765254eda04ae5f6d3

  • SHA512

    3c06e38108954be536f3fc38b114056a6d3e93a85c389730b992d1edcac7f4a070f68b058d37cf0d01a681cf714034fcc21075d733329c7799b9663648a2fb97

  • SSDEEP

    6144:GcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37:GcW7KEZlPzCy37

Score
10/10

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 0cfc033a43500bc9b481cbfc7354e5ad2c97194f1b5ac4765254eda04ae5f6d3
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections