Overview

overview

10

Static

static

10

3876-305-0...ry.exe

windows7-x64

3876-305-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3876-305-0x0000000000400000-0x00000000004B2000-memory.dmp

  • Size

    712KB

  • MD5

    3b798595c938e4653edbcc1398e8cec2

  • SHA1

    0b022720c3e7fb35ecc70b85596c66f3f6f00d07

  • SHA256

    2bcab817aedf36ec28cf76020a94db96292ce12ea8bf20e87a9803c540c4400b

  • SHA512

    c4e41617b4da00275e795a80a4ed5c5229d956ac1693333b491ff04f493c99aefd93afe1a8a1a61160b1267d1f764189d53846b3bbebaa1eceb8654d9abbfd43

  • SSDEEP

    12288:89HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9EkAo/6:QZ1xuVVjfFoynPaVBUR8f+kN10Eo

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

gameservice.ddns.net:4320

Mutex

DC_MUTEX-WBUNVXD

Attributes
  • InstallPath

    AudioDriver\taskhost.exe

  • gencode

    EWSsWwgyJrUD

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    AudioDriver

Signatures

Files

  • 3876-305-0x0000000000400000-0x00000000004B2000-memory.dmp
    .exe windows x86


    Headers

    Sections