Overview

overview

10

Static

static

10

1defc0bb7e...1a.exe

windows7-x64

10

1defc0bb7e...1a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1defc0bb7e21ebc204d1912bec3d8877ad4e3418cfa7b47c76690d40425d761a

  • Size

    251KB

  • MD5

    aa9bd42d7c72eb12d6da805c3a36246f

  • SHA1

    97c0cea03b40325e5441c816e8a54b4db26b7e41

  • SHA256

    1defc0bb7e21ebc204d1912bec3d8877ad4e3418cfa7b47c76690d40425d761a

  • SHA512

    068feb92b3ed6850a13161869c0e5576ddfd923755551f6f5a0bb6e0830ba29f4a302c16917d55ac97bfd971df7508f43caac4a8c5abb7c9db8f15d3abd1dbee

  • SSDEEP

    6144:/cNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL370:/cW7KEZlPzCy37

Score
10/10
upxrepaireddarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

REPAIRED

C2

susanrosanne.ddns.net:8991

Mutex

DC_MUTEX-MTLJCHX

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    v3RMsCdzjW76

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 1defc0bb7e21ebc204d1912bec3d8877ad4e3418cfa7b47c76690d40425d761a
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections