General

  • Target

    c4fdcaa83d5e326746fbf17700d034e1896eb6d9be36ebd802fe595262849190

  • Size

    1.2MB

  • MD5

    8d9ce948c9a35a090a35e2b7a2718bcc

  • SHA1

    03eca052da3727f960ecf8c011cf7e71750e79f2

  • SHA256

    c4fdcaa83d5e326746fbf17700d034e1896eb6d9be36ebd802fe595262849190

  • SHA512

    a50f46d18ba9b5da3e26ff7a6275deb1fc63b228f4228102f78890d7e20b4f9b39ff40fa0f846c674ab4a700f72b8aa858127f5b233d786ccf83249ea39b37b5

  • SSDEEP

    24576:KZ1xuVVjfFoynPaVBUR8f+kN10EBOlKVU5jMhc5Vet+IF:aQDgok30VpGK5qF

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-ZZJCZVN

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    gkcVmZAkWgCb

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

Files

  • c4fdcaa83d5e326746fbf17700d034e1896eb6d9be36ebd802fe595262849190
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections