General

  • Target
    802a0a16f577dd175c1c91a1b3802a5db6c00540910f7a9b7644b2829c940e7d
  • Size 660KB
  • Sample221018-zfv7daeben
  • SHA256 802a0a16f577dd175c1c91a1b3802a5db6c00540910f7a9b7644b2829c940e7d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • darkcomet

Botnet
  • Guest16

C2
  • dracula92.duckdns.org:1707

Mutex
  • DC_MUTEX-F54S21D

Attributes
  • gencode

    VJq1wCjs2tat

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

File Explorer

  • 802a0a16f577dd175c1c91a1b3802a5db6c00540910f7a9b7644b2829c940e7d
    .exe 660KB

802a0a16f577dd175c1c91a1b3802a5db6c00540910f7a9b7644b2829c940e7d

  • IMPHASH 0476e7cb10dfdf778f67f55072917b7d
  • SHA256 802a0a16f577dd175c1c91a1b3802a5db6c00540910f7a9b7644b2829c940e7d
  • MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
592008
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths