General

  • Target

    0dd346738ea632537ba5c322e9b4d6b96d078b928af34351caa16e5c3977ad1d

  • Size

    658KB

  • Sample

    221123-3rhl7sda98

  • MD5

    50e7a94aa838f9b81f037b15158f4e80

  • SHA1

    712c4f164b1938194a151dc8f86fa83ece590482

  • SHA256

    0dd346738ea632537ba5c322e9b4d6b96d078b928af34351caa16e5c3977ad1d

  • SHA512

    5cccb5ab067080c69a280e463d9dcdbfe59a8dd68b3521bc8f58e81a4d0c02fe706ccf0606edf7947875d7f42426b818de20dc3abd30beb23df02f8903658d19

  • SSDEEP

    12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hb:uZ1xuVVjfFoynPaVBUR8f+kN10EBV

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

carambar72.no-ip.org:1604

Mutex

DC_MUTEX-131U5HZ

Attributes
  • gencode

    UZj4SH7P2HPt

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      0dd346738ea632537ba5c322e9b4d6b96d078b928af34351caa16e5c3977ad1d

    • Size

      658KB

    • MD5

      50e7a94aa838f9b81f037b15158f4e80

    • SHA1

      712c4f164b1938194a151dc8f86fa83ece590482

    • SHA256

      0dd346738ea632537ba5c322e9b4d6b96d078b928af34351caa16e5c3977ad1d

    • SHA512

      5cccb5ab067080c69a280e463d9dcdbfe59a8dd68b3521bc8f58e81a4d0c02fe706ccf0606edf7947875d7f42426b818de20dc3abd30beb23df02f8903658d19

    • SSDEEP

      12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hb:uZ1xuVVjfFoynPaVBUR8f+kN10EBV

MITRE ATT&CK Enterprise v6

Tasks