Overview

overview

10

Static

static

10

81bbe3bbcb...4e.exe

windows7-x64

10

81bbe3bbcb...4e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    81bbe3bbcbb47caaab1092b78068adf8d8d3032c51406c60a9a33ab3de0e4d4e

  • Size

    251KB

  • MD5

    6a592c32dd974b454333b1074f08d308

  • SHA1

    27db7f8de23a10f0fa30f109c5e9cdf53d86ed8c

  • SHA256

    81bbe3bbcbb47caaab1092b78068adf8d8d3032c51406c60a9a33ab3de0e4d4e

  • SHA512

    01a6c65e0760ce0157ad19ca2a770fad56654f73a2ea408237842afb7ef914d0bbc903788612201bf8d5d95fb5d422ad8d44717e717991a550d8cf23750f0b3c

  • SSDEEP

    6144:scNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37:scW7KEZlPzCy37

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

ipkiller.zapto.org:4444

Mutex

0ATQVF2

Attributes
  • InstallPath

    WindowsSetup

  • gencode

    bVhNRpSKXx3t

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    SetupFiles

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 81bbe3bbcbb47caaab1092b78068adf8d8d3032c51406c60a9a33ab3de0e4d4e
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections