Overview

overview

10

Static

static

10

b677bb7a0a...20.exe

windows7-x64

10

b677bb7a0a...20.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b677bb7a0a157eaee3724e35e957efe4cfbf02333462694697c23706c5354120

  • Size

    690KB

  • MD5

    d509a9177663e7f7685ad7ec6891bc08

  • SHA1

    8288842c9bc169ce796ce80c01c2cf2cbd3967ca

  • SHA256

    b677bb7a0a157eaee3724e35e957efe4cfbf02333462694697c23706c5354120

  • SHA512

    c23ae4e791eb6594c939f45ec1f764bad669af78e0f30efead75a01537f71d089f4d3d9535b9f0f04699ffa6c75f3d027fcb4f2844e831b6fc8423d633f99cdb

  • SSDEEP

    12288:Y9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h+vg:MZ1xuVVjfFoynPaVBUR8f+kN10EBug

Score
10/10
|swr.prjt| -new-darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

|SWR.PRJT| -NEW-

C2

hdycusje62bh5.no-ip.biz:666

Mutex

DC_MUTEX-V6VMQ0J

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    hkjRbPgT0z5Z

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

Files

  • b677bb7a0a157eaee3724e35e957efe4cfbf02333462694697c23706c5354120
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections