General

  • Target

    ad206e7fc904702cc39366ee348202e3b8bf5c38074f1b2b2bb3485f2d69f203

  • Size

    690KB

  • MD5

    75a3b3a00d77c8dd6c223025dfe09723

  • SHA1

    a64b85df7e57ae76b7164d66ed3e5446fdb7a343

  • SHA256

    ad206e7fc904702cc39366ee348202e3b8bf5c38074f1b2b2bb3485f2d69f203

  • SHA512

    595198542fa9df70e200487a40669edcda2ec2f216ddcca286212ef176d37bb91e4e680a3f03af019c7796e64299d0e5f65be2eb109cf66e76d80967b5b3e06a

  • SSDEEP

    12288:Z9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hGE:jZ1xuVVjfFoynPaVBUR8f+kN10EBN

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Hacked

C2

md5ppn.no-ip.org:5656

md5ppn.no-ip.biz:5656

md5ppn.no-ip.biz:20012

md5ppn.no-ip.org:20012

md5ppn.no-ip.org:81

md5ppn.no-ip.biz:81

Mutex

DC_MUTEX-48S18PP

Attributes
  • gencode

    akgYhyGRHyyK

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

Files

  • ad206e7fc904702cc39366ee348202e3b8bf5c38074f1b2b2bb3485f2d69f203
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections