Overview

overview

10

Static

static

10

9197842a46...72.exe

windows7-x64

10

9197842a46...72.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9197842a460e7233d82b5da1762b2735eb8a5cd7f71e20d259a594d2013ab072

  • Size

    649KB

  • MD5

    aa383305b9113d5dd7c23e02f15d05dc

  • SHA1

    6a1a56de127bce441510ea179fcb53b432c6c97c

  • SHA256

    9197842a460e7233d82b5da1762b2735eb8a5cd7f71e20d259a594d2013ab072

  • SHA512

    8bc7af90ddc7608b697c3c3c770e2759602e81beb66355f5a18f4d277a89d1e61506ea83c3ca3df0f527304839f95fbda64526ae84d2582bf32586ce7343d657

  • SSDEEP

    12288:bk0QVlhmPojAPTMEsUTg0oChO/Q2JbsbjPbN5qhRTtYe3f+Iw86k/9/+C:Q0QRWoJEfg0oChGdJQbjPbNW5tYeP+GP

Score
10/10
guest16_mindarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16_min

C2

rachid.no-ip.biz:1604

Mutex

DCMIN_MUTEX-8Z12Q4H

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    LThWmAW9oAAU

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    DarkComet RAT

Signatures

Files

  • 9197842a460e7233d82b5da1762b2735eb8a5cd7f71e20d259a594d2013ab072
    .exe windows x86

    d9ad5efdb5472496d0fe8dd4305f55f0


    Headers

    Imports

    Sections