General

  • Target

    6484dedde52f8a574cd07b79c4782fdfddbc817a8e4fd3413047cf5185be1713

  • Size

    658KB

  • MD5

    0dd9f38ee15bceeacda2a2dfa3d17004

  • SHA1

    e137617c17d3b736ca0b618b371db021ffdff722

  • SHA256

    6484dedde52f8a574cd07b79c4782fdfddbc817a8e4fd3413047cf5185be1713

  • SHA512

    1844d535b238de7285a79903fff3d32eff3274b00b7bd3da66568d0db17879ddc62b51722f8e300879e569c5f289319cf00878570e24a504a14bbe20f3908ffa

  • SSDEEP

    12288:+9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hNi:KZ1xuVVjfFoynPaVBUR8f+kN10EBHi

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

miecrosoft.servehttp.com:81

Mutex

DC_MUTEX-TVQTMTV

Attributes
  • InstallPath

    SYS32\explorer.exe

  • gencode

    cEKUyU8gkb4a

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

Files

  • 6484dedde52f8a574cd07b79c4782fdfddbc817a8e4fd3413047cf5185be1713
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections