General

  • Target

    5a07d26cc7308c1b5a96353bd78f0eeb834638e3519d98fab678cd77aabad38e

  • Size

    756KB

  • MD5

    0bfc216d574c7c27fa9715afddebc970

  • SHA1

    8dd3d644487592d1f77e2c695620002318c4feae

  • SHA256

    5a07d26cc7308c1b5a96353bd78f0eeb834638e3519d98fab678cd77aabad38e

  • SHA512

    e4a4ee9b5f6a35877b2ef6d038e7cc66425b41adb745db14509d261ff11fdc7de09551ef27d3abf0c678d7470d35e30f82bb2155902c48c3007b53f103d0c610

  • SSDEEP

    12288:v9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h2vvNVRE:ZZ1xuVVjfFoynPaVBUR8f+kN10EBMvze

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

OS

C2

kimtaeyeon.no-ip.org:1604

Mutex

DC_MUTEX-GR3LTT8

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    PHWdFtGJydJ8

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

Files

  • 5a07d26cc7308c1b5a96353bd78f0eeb834638e3519d98fab678cd77aabad38e
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections