Overview

overview

10

Static

static

10

47edd48143...61.exe

windows7-x64

10

47edd48143...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47edd481436b70c4845d42521ae6fcf01ece877ed4a472445a091282c9d9c661

  • Size

    283KB

  • MD5

    10cfa9d58a011d0cf3f0c1f6fce41b00

  • SHA1

    0134dc99f55549b848be2a3e9512d76862bbf70d

  • SHA256

    47edd481436b70c4845d42521ae6fcf01ece877ed4a472445a091282c9d9c661

  • SHA512

    d02f7d7150a60ebe1f798c37099778d61f1a04dc6a56feb218f4a6dc87d6029662810a76d918f4075557c4618aa7b16dc81e4e0b015f3c9419d0e3e8f973e830

  • SSDEEP

    6144:XcNYk1yuwEDBum3qYWnl0pd0EX3Zq2b6wfIDYm0P7d:XcWkbgTYWnYnt/IDYhP7d

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

surindan.no-ip.info:1604

Mutex

DC_MUTEX-VL481JT

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    bmcJuvsPqDff

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 47edd481436b70c4845d42521ae6fcf01ece877ed4a472445a091282c9d9c661
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections