Overview

overview

10

Static

static

10

703ab18d1d...dc.exe

windows7-x64

10

703ab18d1d...dc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    703ab18d1d342882c6551a20df54c52f426d1a15ab103cf74be393e5548d76dc
  • Size 731KB
  • Sample221019-2h4bwabeaj
  • SHA256 703ab18d1d342882c6551a20df54c52f426d1a15ab103cf74be393e5548d76dc
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
vanished lan virusmetasploitdarkcomet

Malware Config

Extracted

Family

  • metasploit

Version

  • encoder/shikata_ga_nai

Extracted

Family

  • darkcomet

Botnet

  • Vanished LAN Virus

C2

  • 192.168.1.110:6454

Mutex

  • DC_MUTEX-QLZEMAY

Attributes
  • gencode

    lLeHvcrjpQuy

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

Signatures

File Explorer

  • 703ab18d1d342882c6551a20df54c52f426d1a15ab103cf74be393e5548d76dc
    .exe 731KB

703ab18d1d342882c6551a20df54c52f426d1a15ab103cf74be393e5548d76dc

  • IMPHASH 481f47bbb2c9c21e108d65f52b04c448
  • SHA256 703ab18d1d342882c6551a20df54c52f426d1a15ab103cf74be393e5548d76dc
  • MD5 SHA1 SHA512 SSDEEP
windowsx86
Minor OS version
Major OS version
Entry point
90112
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths