Overview

overview

10

Static

static

10

611729386e...cf.exe

windows7-x64

10

611729386e...cf.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    611729386e09874c91f60fbfc46bc5c5e9a95f8bb81706ed9f1346846cfb9bcf

  • Size

    349KB

  • MD5

    5cb025c07b220bd361606903f17685ae

  • SHA1

    93d625d9ca25296d1919c00863dea32bbb0d7c5d

  • SHA256

    611729386e09874c91f60fbfc46bc5c5e9a95f8bb81706ed9f1346846cfb9bcf

  • SHA512

    be787a77f1316cb01f760ef9c94de2c4abf71e6217e3d49544b1032902ed695010b7bff385cac9383245d9c7d83062a131f98dd4ec8eb2ff20f7050aeb914e13

  • SSDEEP

    6144:zcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37rd/y:zcW7KEZlPzCy37JK

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

sweg.no-ip.biz:1604

Mutex

DC_MUTEX-2KADN4F

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    4wiBXG7Mrysc

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 611729386e09874c91f60fbfc46bc5c5e9a95f8bb81706ed9f1346846cfb9bcf
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections