General

  • Target

    1f262506e341485700beb3c6fb688c2f0a16320bf910de6965bd544f5f2a2390

  • Size

    756KB

  • MD5

    ebda087ad5c592f1a7b28751c512ab29

  • SHA1

    5b0045271625064bc501e64348e9f781cea443a4

  • SHA256

    1f262506e341485700beb3c6fb688c2f0a16320bf910de6965bd544f5f2a2390

  • SHA512

    6208c5b37490898250d92033c3f3799bfb8370fa4c5e5843a894b1eb86b1264d91b724fc2f4536b0fe4b043472b6a67cc84da4a461f017612c2cc9c00d34c311

  • SSDEEP

    12288:Z9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLd9Ek5C/hnqMd0QZhk:jZ1xuVVjfFoynPaVBUR8f+kN1PEBtD0L

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

192.168.1.55:1604

zinou2015.ddns.net:1604

Mutex

DC_MUTEX-6Z469ER

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    KEApD5Jg36L2

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

Files

  • 1f262506e341485700beb3c6fb688c2f0a16320bf910de6965bd544f5f2a2390
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections