General

  • Target

    dfd9adab1e3b91664d9fd0d03b4971498dc9503e3b8943edca66c5f58f3b2704

  • Size

    659KB

  • MD5

    930b44e1d6b52371365123bc0bae0460

  • SHA1

    ed55396eeb11fa9d0ef655bd4e0e7157ec5c193a

  • SHA256

    dfd9adab1e3b91664d9fd0d03b4971498dc9503e3b8943edca66c5f58f3b2704

  • SHA512

    5bff4e997d936847431ce9a4d9dc7daf27d276cb779cbc9687dccfd1cbecacfc91767a0fa086caeea54d95e66c11574c593a60176c56a7e3547b36471645a225

  • SSDEEP

    12288:+9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZK3/X:KiBIGkbxqEcjsWiDxguehC2+

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-SEPGK2J

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    9LSrnPPLH49l

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

Files

  • dfd9adab1e3b91664d9fd0d03b4971498dc9503e3b8943edca66c5f58f3b2704
    .exe windows x86


    Headers

    Sections