Overview

overview

10

Static

static

10

0c406eeca8...4b.exe

windows7-x64

1

0c406eeca8...4b.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c406eeca8aec2140b783bfe95a92cbf886edad5a40c47e7eba88112e8a6d44b

  • Size

    662KB

  • MD5

    04559bc376c68791cf0ba424783b1f40

  • SHA1

    ae9e7019cce6cc959a611c728000ef7f5ff1679d

  • SHA256

    0c406eeca8aec2140b783bfe95a92cbf886edad5a40c47e7eba88112e8a6d44b

  • SHA512

    ce3b570f1fe60d1ed841e9e3185ae21c3691d8f3d5e4c8840ed9e67fe142926c379f3bfd6c3521e958be5936beae5c927507e965a64b7b66fb26c0fdc9fd5093

  • SSDEEP

    12288:U3OpvNW4a76S/Ddon/m09bbYlIaaMcE2YGhq3vo1RnfAvIESJgoE26yc/jc:COA4aWNn/m09fKIaaBEtWq3A1Ov8Jgbs

Score
10/10
guest16_mindarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16_min

C2

127.0.0.1:81

Mutex

DCMIN_MUTEX-9D1KMSV

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    HEAitWBVxlwi

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    DarkComet RAT

Signatures

Files

  • 0c406eeca8aec2140b783bfe95a92cbf886edad5a40c47e7eba88112e8a6d44b
    .exe windows x86


    Headers

    Sections