General

  • Target

    404815621697fb2f3825f41317b3f6ab4713e6c47c7fdd3f101c570debb93e3c

  • Size

    660KB

  • MD5

    9ae3d423a9531bb793c501f9f51caf3b

  • SHA1

    5ba6c27f09d21126d995d1ed6ab6b073bafcb544

  • SHA256

    404815621697fb2f3825f41317b3f6ab4713e6c47c7fdd3f101c570debb93e3c

  • SHA512

    5276041440bd0582fc964c8dc5acef7aede6b4fffedef8f114c72333755edd1c65d628f3ba483341af3e3415545c240aa291ba689809058621c76363e828bbab

  • SSDEEP

    12288:JXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452UG:1nAw2WWeFcfbP9VPSPMTSPL/rWvzq4J2

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16_min

C2

toorroot.no-ip.org:4444

Mutex

DCMIN_MUTEX-JKETAW7

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    CAmffxHnZ46G

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    DarkComet RAT

Signatures

Files

  • 404815621697fb2f3825f41317b3f6ab4713e6c47c7fdd3f101c570debb93e3c
    .exe windows x86

    0476e7cb10dfdf778f67f55072917b7d


    Headers

    Imports

    Sections