Overview

overview

10

Static

static

10

9d11b3f0fa...cf.exe

windows7-x64

10

9d11b3f0fa...cf.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9d11b3f0fab3413745c81dcab2ba700c7f916ee511d8ea545f8423d6684ba4cf

  • Size

    756KB

  • MD5

    a20db3101a055fb42f6632a6b32944c0

  • SHA1

    6fb86c8a93f30a34ffd2630f748bb6a094dd903b

  • SHA256

    9d11b3f0fab3413745c81dcab2ba700c7f916ee511d8ea545f8423d6684ba4cf

  • SHA512

    e52980356863131e96a9c1d3af1d8d84a6724ea8a47c04e75547262f767c3d59bf3e6c327c8db4409220aec1441208bf581c7a6e7ed0eaa991a04ad1d88894a7

  • SSDEEP

    12288:F9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hR:PZ1xuVVjfFoynPaVBUR8f+kN10EBP

Score
10/10
kurbandarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

KURBAN

C2

proc.no-ip.org:1604

Mutex

DC_MUTEX-9GLW499

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    aXnG98pG0WWn

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

Files

  • 9d11b3f0fab3413745c81dcab2ba700c7f916ee511d8ea545f8423d6684ba4cf
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections