Overview

overview

10

Static

static

10

ecc6bc5f84...72.exe

windows7-x64

10

ecc6bc5f84...72.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ecc6bc5f84cb77d65b811b2766971a27ccb1101869cb60d2ab223e08aec83972

  • Size

    283KB

  • MD5

    8ee7f83fce00c6d8ec51a28669ff0790

  • SHA1

    545ffbaef0f16b8c61199a684855af67131cf450

  • SHA256

    ecc6bc5f84cb77d65b811b2766971a27ccb1101869cb60d2ab223e08aec83972

  • SHA512

    7ac3f5bb673096ab33997eed258d6985535418509cb42bdbe98c1df935ec93de8b08136cade0557f0a4a4f33c4c3f05343b97edcb3edfde5f27962ebb64472a9

  • SSDEEP

    6144:YcNYk1yuwEDBum3qYWnl0pd0EX3Zq2b6wfIDYm0PCt:YcWkbgTYWnYnt/IDYhPG

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

reloaded.zapto.org:1604

Mutex

DC_MUTEX-JGRE9F3

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    kUoUhh1vNYPx

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • ecc6bc5f84cb77d65b811b2766971a27ccb1101869cb60d2ab223e08aec83972
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections