General

  • Target

    fcffa265533c49954dcb479561761ef7dc2edb1e6e478cd749ea8388a7779263

  • Size

    658KB

  • MD5

    091f35437ed4b846a099e931afea880a

  • SHA1

    58b44cfb35a0e0cd1edfec3849d5b2d3bee1bdc7

  • SHA256

    fcffa265533c49954dcb479561761ef7dc2edb1e6e478cd749ea8388a7779263

  • SHA512

    b1bb9588fe0b4d893d0a5e59cb2782876f8eb6833b3a2dbf22fe1bfefdd2964b2ac17c1fb76a14c9a46506614bb9f9c7de5dba3d86c3f643d039961a570e823a

  • SSDEEP

    12288:i9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h/:OZ1xuVVjfFoynPaVBUR8f+kN10EBd

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

svhost

C2

narcotraf.mooo.com:1313

Mutex

DCMIN_MUTEX-BL7QE2G

Attributes
  • gencode

    8UFJ9WwRCqu8

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

Files

  • fcffa265533c49954dcb479561761ef7dc2edb1e6e478cd749ea8388a7779263
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections