Overview

overview

10

Static

static

10

fae5692310...e5.exe

windows7-x64

10

fae5692310...e5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fae56923106eca2dfb112b49bcec4a719646e305b348b63d12a174efc7ee9ae5

  • Size

    349KB

  • MD5

    13a9c6d325c8c29c8a62a87d074f7320

  • SHA1

    56c3b41cfabf8ef386398bf81f6899af57c5e780

  • SHA256

    fae56923106eca2dfb112b49bcec4a719646e305b348b63d12a174efc7ee9ae5

  • SHA512

    515f69603653c379064402cc7d75c1f4b83e8e6588bca2adacd119ec9fcce353307965372f4b07051f65bd803d7a22788bbf53ee9477a73508c9061a2e4ecd70

  • SSDEEP

    6144:OcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37dCnpa:OcW7KEZlPzCy37Ynw

Score
10/10
upxhackeddarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Hacked

C2

93.80.127.11:1604

leiger.no-ip.org:1604
Mutex

DC_MUTEX-6XNGS6D

Attributes
  • InstallPath

    WindowsDefencer\Updater.exe

  • gencode

    8EakibQ4lFwH

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    Windows Defencer

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • fae56923106eca2dfb112b49bcec4a719646e305b348b63d12a174efc7ee9ae5
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections