General
-
Target
522f5a26d24f2aa64e7a6c0d0c437e89e6aa56e5d93d848ec95eb21fc406d59a
-
Size
699KB
-
Sample
221125-wbglmsda35
-
MD5
1a91a89bfc87b526e69280abeb3e528e
-
SHA1
a0ef34b93142a4c02f9b8dab81fccd48b290211b
-
SHA256
522f5a26d24f2aa64e7a6c0d0c437e89e6aa56e5d93d848ec95eb21fc406d59a
-
SHA512
787c237f4ff7cdf5e48c4fd8800ebad33a0e0369819286cd285eb6facb78f29ec65295bcfbe3f8e9f5debae0ebcf1955fb0795e046760fceb47664cd04c01bf7
-
SSDEEP
12288:5gPNTrkQIgegZYsO165OOfYFc9koGg1+8faI+nQ+xtEBafb68xC1PA:5aNTQQIgeU3O1FOrGg1+AaIZkakz6n1I
Static task
static1
Behavioral task
behavioral1
Sample
522f5a26d24f2aa64e7a6c0d0c437e89e6aa56e5d93d848ec95eb21fc406d59a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
522f5a26d24f2aa64e7a6c0d0c437e89e6aa56e5d93d848ec95eb21fc406d59a.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
darkcomet
Guest16_min
96.29.209.33:1604
DCMIN_MUTEX-VG70KUE
-
gencode
8teTVlZE6Lrc
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
522f5a26d24f2aa64e7a6c0d0c437e89e6aa56e5d93d848ec95eb21fc406d59a
-
Size
699KB
-
MD5
1a91a89bfc87b526e69280abeb3e528e
-
SHA1
a0ef34b93142a4c02f9b8dab81fccd48b290211b
-
SHA256
522f5a26d24f2aa64e7a6c0d0c437e89e6aa56e5d93d848ec95eb21fc406d59a
-
SHA512
787c237f4ff7cdf5e48c4fd8800ebad33a0e0369819286cd285eb6facb78f29ec65295bcfbe3f8e9f5debae0ebcf1955fb0795e046760fceb47664cd04c01bf7
-
SSDEEP
12288:5gPNTrkQIgegZYsO165OOfYFc9koGg1+8faI+nQ+xtEBafb68xC1PA:5aNTQQIgeU3O1FOrGg1+AaIZkakz6n1I
Score10/10-
Suspicious use of SetThreadContext
-