Overview

overview

10

Static

static

10

9c6ffedf25...0f.exe

windows7-x64

10

9c6ffedf25...0f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9c6ffedf25f4291eeb1d8a94cd255c966c9f87f88069e08e087bcd64564f150f

  • Size

    252KB

  • MD5

    0c0620c82e6a31be7e4b617b39949110

  • SHA1

    8d88e0a5e7346e8be528e362c1218aa2b504148c

  • SHA256

    9c6ffedf25f4291eeb1d8a94cd255c966c9f87f88069e08e087bcd64564f150f

  • SHA512

    1f345c20f7d9434f134a7f1017c9aa79211a5f6f7df8c6194932b9447415197f79be08f951e03dbb7d7df36c8104bf43b4df61f431f34587e045be4191f6cfa6

  • SSDEEP

    6144:ocNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37R:ocW7KEZlPzCy37R

Score
10/10
upxv1.0darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

v1.0

C2

systemtool.zapto.org:20000

systemtool1.zapto.org:20000

systemtool2.zapto.org:20000

systemtool3.zapto.org:20000

systemtool4.zapto.org:20000
Mutex

DC_MUTEX-DEEMQZK

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    tPQXNh70gpDJ

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    SystemTool

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 9c6ffedf25f4291eeb1d8a94cd255c966c9f87f88069e08e087bcd64564f150f
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections