General

  • Target

    b77017cc9d6f22acc41306ce5b46076ad54520ac4de7e7a224476861024f7e7e

  • Size

    2.9MB

  • MD5

    62a0ea786f2524412ffd7c6ea4ce87a1

  • SHA1

    7339871230a69684d9bf81b7e2f508b49abae5bc

  • SHA256

    b77017cc9d6f22acc41306ce5b46076ad54520ac4de7e7a224476861024f7e7e

  • SHA512

    a0e8f9445e35c3740dea160637ecc2169366d7d54e7f536238df61155a37bcd85eb6b242122dbe16ad3b40321a532d70d516e05a95e7a474c547ef37e4c77920

  • SSDEEP

    49152:6QDgok30CdLE6uLu0n9yIPTRDLu0no6gCWELu0nbQCQwwULu0nXM+kYLu0n:6QU/hL4LP1TRDLPo6oELPb/wULPXFLP

Malware Config

Extracted

Family

darkcomet

Botnet

New-July-July4-01

C2

dgorijan20785.hopto.org:35800

Mutex

DC_MUTEX-N3AV3EU

Attributes
  • gencode

    sGSTFQ1pY1TB

  • install

    false

  • offline_keylogger

    true

  • password

    hhhhhh

  • persistence

    false

Signatures

Files

  • b77017cc9d6f22acc41306ce5b46076ad54520ac4de7e7a224476861024f7e7e
    .exe windows x86


    Headers

    Sections