Overview

overview

10

Static

static

10

Jns.exe

windows7-x64

10

Jns.exe

windows10-2004-x64

10

lib/UserDict.pyc

windows7-x64

lib/UserDict.pyc

windows10-2004-x64

3

lib/__future__.pyc

windows7-x64

3

lib/__future__.pyc

windows10-2004-x64

3

lib/copy_reg.pyc

windows7-x64

3

lib/copy_reg.pyc

windows10-2004-x64

3

lib/linecache.pyc

windows7-x64

3

lib/linecache.pyc

windows10-2004-x64

3

lib/ntpath.pyc

windows7-x64

3

lib/ntpath.pyc

windows10-2004-x64

3

lib/os.pyc

windows7-x64

3

lib/os.pyc

windows10-2004-x64

3

lib/site.pyc

windows7-x64

3

lib/site.pyc

windows10-2004-x64

3

lib/stat.pyc

windows7-x64

3

lib/stat.pyc

windows10-2004-x64

3

lib/string.pyc

windows7-x64

3

lib/string.pyc

windows10-2004-x64

3

lib/traceback.pyc

windows7-x64

3

lib/traceback.pyc

windows10-2004-x64

3

lib/types.pyc

windows7-x64

3

lib/types.pyc

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    e3ffc70965ed0928b55199e3d7ea884f5010068ffc3d721ec86aa8051f15ab8a

  • Size

    6.6MB

  • MD5

    d8b1a31ef93d3672182bbb9f3744e6c3

  • SHA1

    8df4975d9c5478a3e79cc9518f0e2c780342131c

  • SHA256

    e3ffc70965ed0928b55199e3d7ea884f5010068ffc3d721ec86aa8051f15ab8a

  • SHA512

    83d5a931284161964ac9cd2173e5100777364879ea11ec012dfa8bc0bb0462582b3721b128f960bc1d46df59a79ec4bbe0100ed328eee5fe89111b2d6a9f9650

  • SSDEEP

    196608:UUkU9ms6+MKtdQ/YkyGpdyDyZvt3aJxF1:UUkU9j6JKtdoY+fyiALb

Score
10/10
mt45darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Mt45

C2

127.0.0.1:1604

176.53.115.60:1604

176.53.115.60:80

176.53.115.60:11002

176.53.115.60:81

176.53.115.60:83

176.53.115.60:443

127.0.0.1:80

127.0.0.1:11002

127.0.0.1:81

127.0.0.1:83

127.0.0.1:443
Mutex

DC_MUTEX-G0CFHX7

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    aLXoEvJZlRVv

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

Files

  • e3ffc70965ed0928b55199e3d7ea884f5010068ffc3d721ec86aa8051f15ab8a
    .rar
  • Jns.exe
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections

  • lib/UserDict.pyc
  • lib/__future__.pyc
  • lib/copy_reg.pyc
  • lib/linecache.pyc
  • lib/ntpath.pyc
  • lib/os.pyc
  • lib/site.pyc
  • lib/stat.pyc
  • lib/string.pyc
  • lib/traceback.pyc
  • lib/types.pyc
  • locale.cfg
  • pack/Index
  • pack/locale_tr.eix
  • pack/locale_tr.epk
  • pack/metin2_patch_flame.eix
  • pack/metin2_patch_flame.epk
  • pack/metin2_patch_flame_dungeon.eix
  • pack/metin2_patch_flame_dungeon.epk
  • pack/root.eix
  • pack/root.epk
  • pack/uiscript.eix
  • pack/uiscript.epk