General

  • Target

    7a422f958a115b50e8b9f9c24f0192e9107b6cfd7b126081590da7ee33cfc684

  • Size

    690KB

  • MD5

    c28332a853f64a2b95e3d72078228d2d

  • SHA1

    5615c2541331dc47cbb79ab4a9dcbe3558079af3

  • SHA256

    7a422f958a115b50e8b9f9c24f0192e9107b6cfd7b126081590da7ee33cfc684

  • SHA512

    5017a43734ed892669365f0f13b6efdaff36e40b8c14edc26063a3471a1d5b7551417eb8a96d7f7e8f6f744a18368e963f5c84865420b153555ffbc7696cafab

  • SSDEEP

    12288:e9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFc7:qiBIGkbxqEcjsWiDxguehC2SJ

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

×èòåðû

C2

serega213123.ddns.net:16044

Mutex

DC_MUTEX-GVB5ZHN

Attributes
  • InstallPath

    Sustem32\msdcsc.exe

  • gencode

    8D4rQGSEjZK8

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    Sustem32

Signatures

Files

  • 7a422f958a115b50e8b9f9c24f0192e9107b6cfd7b126081590da7ee33cfc684
    .exe windows x86

    8033c11f8a2fdfc317e8655120579933


    Headers

    Imports

    Sections