Overview

overview

10

Static

static

10

b917656e0f...9c.exe

windows7-x64

10

b917656e0f...9c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b917656e0fa389fd2336637b0270b8b088fe2c30dc6ab3eb95750297139c109c

  • Size

    421KB

  • MD5

    d4a6679fdc809a39631f1deb7ef32f9c

  • SHA1

    2b9f8f941138063308bd099298245a35e452f9fe

  • SHA256

    b917656e0fa389fd2336637b0270b8b088fe2c30dc6ab3eb95750297139c109c

  • SHA512

    506d7809742abbfde1ef3c13ae3c17199f593ad9af5c0c91900508d41301b1eef29e33606acc2773f3cc16aa9b2464dc8545cd4b36fb70badc206d9d1e742dbc

  • SSDEEP

    6144:8cNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37axOZvSx5dh:8cW7KEZlPzCy37axk

Score
10/10
upxmerhaba!darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

MERHABA!

C2

erturkiyedxxa0002.no-ip.biz:81

Mutex

DC_MUTEX-59YF34S

Attributes
  • InstallPath

    OXUT\system32.exe

  • gencode

    8D3wQRwK4Tcj

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    System32

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • b917656e0fa389fd2336637b0270b8b088fe2c30dc6ab3eb95750297139c109c
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections