Overview

overview

10

Static

static

10

6553a3af2b...23.exe

windows7-x64

10

6553a3af2b...23.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6553a3af2bae4515abafcb84e3e50da7109a36ecd4e42da1d0b640eb68239023

  • Size

    294KB

  • MD5

    52d306a1cce989f1ff10324db9e20804

  • SHA1

    43511c15976abe95ec23d1ae9dc46fb118723de7

  • SHA256

    6553a3af2bae4515abafcb84e3e50da7109a36ecd4e42da1d0b640eb68239023

  • SHA512

    ff138c46634b5880f5b2732a3d984c705689a7ae7a9553e0252f09961a37575502746012c3cc33a0d7e63ae35ba5436f58f8978b674db8f5379196e46441a67a

  • SSDEEP

    6144:ecNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37vL5qooH:ecW7KEZlPzCy371g

Score
10/10
upxxast&daysdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Xast&Days

C2

iminside.no-ip.org:1111

iminside.no-ip.org:2222

iminside.no-ip.org:3333

iminside.no-ip.org:4444
Mutex

DSFJSADUER234089723VNDSFHDS

Attributes
  • InstallPath

    FlashPlayer\Player.exe

  • gencode

    u2d2SJ5wWv2A

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    PlayerFlash

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 6553a3af2bae4515abafcb84e3e50da7109a36ecd4e42da1d0b640eb68239023
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections