Overview

overview

10

Static

static

10

ce8c28cf71...37.exe

windows7-x64

10

ce8c28cf71...37.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce8c28cf71c8bda6d99a764f9d9ea530af57fbb523c5b55d063e4dd241a03937

  • Size

    658KB

  • MD5

    cd39367ce23d6a0060f77abbaac8ddd4

  • SHA1

    dda1cc77df5561c82e71406acd07f05358a3c36d

  • SHA256

    ce8c28cf71c8bda6d99a764f9d9ea530af57fbb523c5b55d063e4dd241a03937

  • SHA512

    b63bd9f9ade730c1c646be8fe36996679fb26857fd7d24a7c57166aa3b0ed08d1c2179ead73759829bd006cf485fc2d98d779b12aefaa95f0efc2f05ca51009c

  • SSDEEP

    12288:e9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hv:qZ1xuVVjfFoynPaVBUR8f+kN10EB1

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

192.168.2.2:81

127.0.0.1:81

88.227.229.102:81

asasasasa.no-ip.biz:81
Mutex

DC_MUTEX-F825WCP

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    ADuLGonbB8zp

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

Files

  • ce8c28cf71c8bda6d99a764f9d9ea530af57fbb523c5b55d063e4dd241a03937
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections