Overview

overview

10

Static

static

10

a321a77a9a...67.exe

windows7-x64

10

a321a77a9a...67.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a321a77a9ad430e9b0a6678549c6f8d44283d841b8604391f1e52f3638901f67

  • Size

    7.6MB

  • MD5

    c6d37ab0623599e829266ace02892c17

  • SHA1

    936759b1a5c816d329aefa0825486442807fcd09

  • SHA256

    a321a77a9ad430e9b0a6678549c6f8d44283d841b8604391f1e52f3638901f67

  • SHA512

    b1aa9d7227e77932005296b95b5c3ae4874b2d4a6a547133e8e0f402ba3aaf96590c11a9cf8b8f38c0f8dde7b155944ca581a8474bb17c26beb0268db5d354ab

  • SSDEEP

    196608:1QI5DgmZwrVGOsvsNLXETl//LMaOMnFLP8rkL+6NZmUi:1hVgmZAVGOsvsNLXETl//LMElI6NYUi

Score
10/10
kurbannndarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

kurbannn

C2

127.0.0.1:81

cyber1989.no-ip.org:81
Mutex

DC_MUTEX-LUZKWJR

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    r4nfE8Es9aw7

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

Files

  • a321a77a9ad430e9b0a6678549c6f8d44283d841b8604391f1e52f3638901f67
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections