Overview

overview

10

Static

static

10

8c921d333a...69.exe

windows7-x64

10

8c921d333a...69.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c921d333a7dde6829d73e0fa8ffb0b6a262819e7691adc61a7ae3f207b0f469

  • Size

    251KB

  • MD5

    7bb869e89a8b53bf4315c46cdee6d7f0

  • SHA1

    f44875abc260ca40059d736cbeb903d054fe561d

  • SHA256

    8c921d333a7dde6829d73e0fa8ffb0b6a262819e7691adc61a7ae3f207b0f469

  • SHA512

    ed41062db5c89374bbe3c7ec0f816cbfd2aadc865d996d78912a2d8121a232bbf82a7e47f4d2371e567dd95a6ef310d1b09d4ee9fc0d0cc01020ca0da688fd52

  • SSDEEP

    6144:hcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37:hcW7KEZlPzCy37

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

joshmp5.no-ip.biz:18666

joshmp5.no-ip.biz:18667
Mutex

DC_MUTEX-HS297M9

Attributes
  • gencode

    AGycef9RjNKr

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 8c921d333a7dde6829d73e0fa8ffb0b6a262819e7691adc61a7ae3f207b0f469
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections