Overview

overview

10

Static

static

10

c331cd8db2...f9.exe

windows7-x64

10

c331cd8db2...f9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c331cd8db208d0db4c28198890c79706d1221498a12b30ece73c71b0425195f9

  • Size

    756KB

  • MD5

    83f661be7f1e929a79715557479bb721

  • SHA1

    f68d3171173d4bd87cb09f3f8e96f703900c8420

  • SHA256

    c331cd8db208d0db4c28198890c79706d1221498a12b30ece73c71b0425195f9

  • SHA512

    9c3757475cbc48e3b2ccdbd01d2848fac4dae18e325b4d6e0b335836c6fe2c6fcbc0860cbb5b7fdf95994098d68ae4a39c1247ad8c6173fe1b727748d453a192

  • SSDEEP

    12288:x9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hG:rZ1xuVVjfFoynPaVBUR8f+kN10EBY

Score
10/10
kurban darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Kurban

C2

hackbabyhack.no-ip.org:1604

Mutex

DC_MUTEX-84L14V5

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    Ru8fygHWV11l

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

Files

  • c331cd8db208d0db4c28198890c79706d1221498a12b30ece73c71b0425195f9
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections