General
-
Target
879a1cbf5a37d27f313bc5028decf8eb73385d78699071fb27d1addab00224ad
-
Size
1.5MB
-
Sample
221201-hwa3pshg6z
-
MD5
9f846304ca03af9cd8c24364305f51d6
-
SHA1
bf0f159c9f477058f6f4b1af7c91b18a3bfc4d49
-
SHA256
879a1cbf5a37d27f313bc5028decf8eb73385d78699071fb27d1addab00224ad
-
SHA512
d61ca65e9f0fec86f049f23b9913f7c56440b522a9636641e167f51b24cec36f6260d96905ecac1fdc28c1669094d6e574dcaa70d04ad3c3060912f437f1c77f
-
SSDEEP
24576:n/y/69r+q6e/2YeY+yTZ8h7IETl/GjNwBVSInELrKE0Wx8fglv/K:nKEiql2Y9iEGGjNxJXUIllv/K
Static task
static1
Behavioral task
behavioral1
Sample
879a1cbf5a37d27f313bc5028decf8eb73385d78699071fb27d1addab00224ad.exe
Resource
win7-20220901-en
Malware Config
Extracted
darkcomet
bot
canardwc.zapto.org:1604
DC_MUTEX-VSDJA8C
-
gencode
E9ARHzMPTXjL
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
879a1cbf5a37d27f313bc5028decf8eb73385d78699071fb27d1addab00224ad
-
Size
1.5MB
-
MD5
9f846304ca03af9cd8c24364305f51d6
-
SHA1
bf0f159c9f477058f6f4b1af7c91b18a3bfc4d49
-
SHA256
879a1cbf5a37d27f313bc5028decf8eb73385d78699071fb27d1addab00224ad
-
SHA512
d61ca65e9f0fec86f049f23b9913f7c56440b522a9636641e167f51b24cec36f6260d96905ecac1fdc28c1669094d6e574dcaa70d04ad3c3060912f437f1c77f
-
SSDEEP
24576:n/y/69r+q6e/2YeY+yTZ8h7IETl/GjNwBVSInELrKE0Wx8fglv/K:nKEiql2Y9iEGGjNxJXUIllv/K
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-