Overview

overview

10

Static

static

10

e904bf6354...d3.exe

windows7-x64

10

e904bf6354...d3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e904bf6354d5e753d292088625b6876bdcb0b079d8dee97a22e155bc736608d3

  • Size

    314KB

  • MD5

    6477601a928c9854034ce2037593d080

  • SHA1

    165a2e5f65c12af1d70b0109c0ceede783fee451

  • SHA256

    e904bf6354d5e753d292088625b6876bdcb0b079d8dee97a22e155bc736608d3

  • SHA512

    10e51fef57a7890ae5581f7e0bfdb3280e2e99ede7f0d8dc51790f24430aac4a477119726b328352f2f9f1ccc72a1ac5608f03672c24bb4ce07352433f537e4e

  • SSDEEP

    6144:McNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37mnRivgTWfz:McW7KEZlPzCy37YR/W

Score
10/10
upxratdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

RAT

C2

bob611411.no-ip.biz:1604

Mutex

DC_MUTEX-Z1RV6JK

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    TVdX3gKN5hkQ

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • e904bf6354d5e753d292088625b6876bdcb0b079d8dee97a22e155bc736608d3
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections