General

  • Target

    fc7ac0015277ece8799e64859a0374cb11e9e1b53c8b5cba7ad874be5b3a531a

  • Size

    803KB

  • MD5

    9aa1ed62ef6701deb41e8da369e102be

  • SHA1

    4ede540f98e9b2d8a1e3ec0c5add28f61635d438

  • SHA256

    fc7ac0015277ece8799e64859a0374cb11e9e1b53c8b5cba7ad874be5b3a531a

  • SHA512

    0c91c8b33cf1fcbbcb383fc267796416c9fa8581ab34a0d5d37fe5dd9231ceb123c52c9d0ff374b5e4f6e810b2ba63a5a1f4637b129275c88cea21585da4c758

  • SSDEEP

    24576:YZ1xuVVjfFoynPaVBUR8f+kN10EB9oZ2n:IQDgok304n

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

LoIc 1

C2

testing1234567.no-ip.info:1604

testing1234567.no-ip.info:25565

127.0.0.1:25565

192.168.1.69:25565

Mutex

DC_MUTEX-L135YZ1

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    pZYRXTafpvHh

  • install

    true

  • offline_keylogger

    true

  • password

    rhysjones

  • persistence

    true

  • reg_key

    Chrome.exe

Signatures

Files

  • fc7ac0015277ece8799e64859a0374cb11e9e1b53c8b5cba7ad874be5b3a531a
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections