Overview

overview

10

Static

static

10

e5110b4f00...fd.exe

windows7-x64

10

e5110b4f00...fd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e5110b4f007365f585fb6b059a0a2fd8695db3bb635a52e8472ed56440fbf1fd

  • Size

    658KB

  • MD5

    0d493a83e1b0fb868588591dbeb4a6e0

  • SHA1

    f1c608d38606850f8af4881f4ced72c709fc25bd

  • SHA256

    e5110b4f007365f585fb6b059a0a2fd8695db3bb635a52e8472ed56440fbf1fd

  • SHA512

    209a566efefbaebe719de173fea1f27af3ca6d15a5ed29211e206c34f35a7a3821bd81c81480f37ea2ff0c442eaa79babcda08271ca0e675c9f20203ffed4880

  • SSDEEP

    12288:S9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLd9Ek5C/hP:+Z1xuVVjfFoynPaVBUR8f+kN1PEBR

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-MUWQFF3

Attributes
  • InstallPath

    8\c.exe

  • gencode

    NDrECeKz8xgZ

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

Files

  • e5110b4f007365f585fb6b059a0a2fd8695db3bb635a52e8472ed56440fbf1fd
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections