Overview

overview

10

Static

static

10

1ff4b5c48c...fb.exe

windows7-x64

10

1ff4b5c48c...fb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1ff4b5c48c47f08a9c55e6695be6b5ea98f1ac445129cfc27cf9f78c04700efb

  • Size

    2.3MB

  • MD5

    56cf4df98189af7e552999ae3c5fca57

  • SHA1

    61b6bce1b783683dbef1a1510859f973158c8390

  • SHA256

    1ff4b5c48c47f08a9c55e6695be6b5ea98f1ac445129cfc27cf9f78c04700efb

  • SHA512

    51de2a16a4f2af641b1189727e16e76c01eb4f7144fea5eb33122dadf2973623c24fff84a0ea3d5a1f8fea403de20c4c721331d148dada4a4a21b58e642add71

  • SSDEEP

    49152:2iRnBe9DWg2HjEi7PKIbi6vz0gti4z+khbQeTV4oGgkV+Mjjn2kRVTU8pi5+MdJm:2iLe9D32DECiIdSj4b1TV4ohkVjjjn2k

Score
10/10
upxoutsidedarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Outside

C2

iminside.no-ip.org:1111

iminside.no-ip.org:2222

iminside.no-ip.org:3333

iminside.no-ip.org:4444
Mutex

DSFSSJ23409SDFJSDFJA

Attributes
  • InstallPath

    AdobeService\AdobeService.exe

  • gencode

    suMg3u5m4lSK

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    AdobeService

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 1ff4b5c48c47f08a9c55e6695be6b5ea98f1ac445129cfc27cf9f78c04700efb
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections