Overview

overview

10

Static

static

10

d9ad0927d0...01.exe

windows7-x64

10

d9ad0927d0...01.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d9ad0927d0c33021e1d737d136f75c8e5b36ef084b6249e1659e353e792eb701

  • Size

    253KB

  • MD5

    25792dad9513c2066d07d9191f1aab24

  • SHA1

    859ac8c4e2077aa329cec0b30eaaa03c4453eeee

  • SHA256

    d9ad0927d0c33021e1d737d136f75c8e5b36ef084b6249e1659e353e792eb701

  • SHA512

    091d596447a65be496440387b4094128ad1eaaca145570d1f5596f46d137bf2403036475f7b5b47698f9e69b56dd0186eee0866bf5ad82e2c5d4f0dfdb0e860e

  • SSDEEP

    6144:0D7cY2fgssM7Wirg9KXylmRiL+QMeC/i6isqX7UovnONztByipwxZ:0l8E4w5huat7UovONzbXw

Score
10/10
upxtorbendarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

torben

C2

192.168.2.102:1604

Mutex

DC_MUTEX-RPQ18VB

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    SJZlB4xprDoN

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • d9ad0927d0c33021e1d737d136f75c8e5b36ef084b6249e1659e353e792eb701
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections