Overview

overview

10

Static

static

10

flexabyprojectv2.exe

windows7-x64

10

flexabyprojectv2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    flexabyprojectv2.rar

  • Size

    246KB

  • MD5

    9c90198e870d59873a7de8003ec02e13

  • SHA1

    58c8edb76de569ceedb4255cc654f4d031ee98d2

  • SHA256

    19af168aac93966ee27527aff5ca7a258f2c740fac9dd327c440cd225276bb93

  • SHA512

    0ec5ad103e668c7749091d0b9aae7af79613121edfb0b3958386c9947fba375eb7a011b74fa78646f3bcb3dab3b5820135da8eef0c5bba6541cd5a36084d2752

  • SSDEEP

    6144:RSzIBMYilbcEw+AFc3SliFidq/TguDAOpsNk8tIdT:RSDYilwp+ObukuDn8kVV

Score
10/10
upxsazandarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Sazan

C2

hckexe.duckdns.org:1604

Mutex

DC_MUTEX-DY54MEJ

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    aBlcf64AC80d

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • flexabyprojectv2.rar
    .rar
  • flexabyprojectv2.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections