General
-
Target
c9d9ff232e23f1e7231a091c86955c070caf3002553713a9c3ff41d4eba37f07
-
Size
596KB
-
Sample
221202-1rjs6aca2v
-
MD5
82b6847860a2fb6ae84badda650bec3c
-
SHA1
fee9fcad16bef3b27a37696aa9d52bf5add80a6d
-
SHA256
c9d9ff232e23f1e7231a091c86955c070caf3002553713a9c3ff41d4eba37f07
-
SHA512
2d55988f51f0e1cf4c7f85020ac6f21c37dcf5846295541db98eee4acf2b7a1c70a3f5da1dbc75feeaf2f0105e0525d2d57ecaf0b8db4196dcc2c2c3dd209b7b
-
SSDEEP
12288:6Fc1GUux1KgyM+23XN+GzKyUcAn21+srdO4gAblgKLsfPCPTPC:6Fc18v+2nN+3ytAnDwiKLEeTK
Static task
static1
Behavioral task
behavioral1
Sample
c9d9ff232e23f1e7231a091c86955c070caf3002553713a9c3ff41d4eba37f07.exe
Resource
win7-20221111-en
Malware Config
Extracted
darkcomet
Guest16
127.0.0.1:1604
DC_MUTEX-0PRSAK8
-
gencode
AU83b2dyG2P1
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
c9d9ff232e23f1e7231a091c86955c070caf3002553713a9c3ff41d4eba37f07
-
Size
596KB
-
MD5
82b6847860a2fb6ae84badda650bec3c
-
SHA1
fee9fcad16bef3b27a37696aa9d52bf5add80a6d
-
SHA256
c9d9ff232e23f1e7231a091c86955c070caf3002553713a9c3ff41d4eba37f07
-
SHA512
2d55988f51f0e1cf4c7f85020ac6f21c37dcf5846295541db98eee4acf2b7a1c70a3f5da1dbc75feeaf2f0105e0525d2d57ecaf0b8db4196dcc2c2c3dd209b7b
-
SSDEEP
12288:6Fc1GUux1KgyM+23XN+GzKyUcAn21+srdO4gAblgKLsfPCPTPC:6Fc18v+2nN+3ytAnDwiKLEeTK
-
Suspicious use of SetThreadContext
-