Overview

overview

10

Static

static

10

9f5d9e3b65...0b.exe

windows7-x64

10

9f5d9e3b65...0b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9f5d9e3b65dbaff8acbfef1b4c36ec1f67155a54458ba5367b43129b4915af0b

  • Size

    2.3MB

  • MD5

    316ecbf716241fdcba5aa5e89dd1e1d4

  • SHA1

    1690702a192f8b0c1d6dc9f1745bbbb5957a689d

  • SHA256

    9f5d9e3b65dbaff8acbfef1b4c36ec1f67155a54458ba5367b43129b4915af0b

  • SHA512

    7b7cb195075c1344e8f90b19891cd04d6972c4af31b7320692aa6fae0701f60cc018b54189bb22de205d399275a15f32c88b6a552bc1493b80768aff926d854c

  • SSDEEP

    49152:tiRnBe9DWg2HjEi7PKIbi6vz0gti4z+khbQeTV4oGgkV+Mjjn2kRVTU8pi5+MdJ:tiLe9D32DECiIdSj4b1TV4ohkVjjjn2G

Score
10/10
upximagemdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Imagem

C2

iminside.no-ip.org:1111

iminside.no-ip.org:2222

iminside.no-ip.org:3333

iminside.no-ip.org:4444
Mutex

KHJTSJCFGVLHBJK�L908765456789HGKTYDKY;HJ

Attributes
  • InstallPath

    AdobeService\AdobeService.exe

  • gencode

    ykhBzBcB47iz

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    AdobeService

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 9f5d9e3b65dbaff8acbfef1b4c36ec1f67155a54458ba5367b43129b4915af0b
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections