General
-
Target
369848f957a32dba07b72a6700b292bd59d770d34e73c487d45672bb9453f6fd
-
Size
922KB
-
MD5
1d8b5a5f7128c0c0bdaf03efe8aebfc0
-
SHA1
d5b74b1b5b3f67fc08024fd1c76be96177d96de0
-
SHA256
369848f957a32dba07b72a6700b292bd59d770d34e73c487d45672bb9453f6fd
-
SHA512
188416f1c2b43424f066cbc9b0c05a39c1aa0eb2dff9644faccbb2db8ad2d33a1688123a0d52c70aa92314e381ec489ea3dbd84563f2dd3fcb54ce98d05486a4
-
SSDEEP
12288:V9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9EkNC/vDn:fZ1xuVVjfFoynPaVBUR8f+kN10EdL
Score
10/10
Malware Config
Extracted
Family
darkcomet
Botnet
Guest16
C2
192.168.1.64:1604
Mutex
DC_MUTEX-5XBVW48
Attributes
-
InstallPath
MSDCSC\msdcsc.exe
-
gencode
tb7uvXKY0gxf
-
install
true
-
offline_keylogger
true
-
persistence
true
-
reg_key
MicroUpdate
Signatures
-
Darkcomet family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
Files
-
369848f957a32dba07b72a6700b292bd59d770d34e73c487d45672bb9453f6fd
Headers
Sections