Overview

overview

10

Static

static

10

14a0a7dffc...bc.exe

windows7-x64

10

14a0a7dffc...bc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    14a0a7dffcf002efaffcbbdf6556ad294d983a03da2584e21b37a901c71e77bc

  • Size

    251KB

  • MD5

    f91876d85839e633ac52a75741a8c70e

  • SHA1

    3640aadef0d045a86bfef31486855e62db4b110c

  • SHA256

    14a0a7dffcf002efaffcbbdf6556ad294d983a03da2584e21b37a901c71e77bc

  • SHA512

    0d4dc99bd13bb0f1b21e8faac74950bb2a844f1658b40a5d6ee8460a7fdd82ee96e032cb06806a4dd75c9c0842b56b3ffd3ce81753dfdf04e397a383ba7f60a8

  • SSDEEP

    6144:ncNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37:ncW7KEZlPzCy37

Score
10/10
upxduc khiemdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Duc khiem

C2

blueskies.no-ip.org:7692

Mutex

DC_MUTEX-PUVA3JK

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    P30uvkDbZ4Nd

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 14a0a7dffcf002efaffcbbdf6556ad294d983a03da2584e21b37a901c71e77bc
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections