General

  • Target

    d9ec2e333a48365878a8fe44e287111e73e43a8314ab717bfd20f9ef1bde9afc

  • Size

    3.6MB

  • MD5

    7fee70edac93dbec8a5a602b33b97d0b

  • SHA1

    f9595e9e4572dd068a70502faf7717328d8d30ca

  • SHA256

    d9ec2e333a48365878a8fe44e287111e73e43a8314ab717bfd20f9ef1bde9afc

  • SHA512

    f04c2457c481ff0ea7de2f0d7bb690ebc0a24d5eebb997075ded14ef0d34becc3d045ab1d57a27657bc85fef3031e5bb7e62548ce3c4e26d3596f16a657c982f

  • SSDEEP

    98304:aQU/QvsjfLP3L4LP1TRDLPo6oELPb/wULPXFLPp:aQjsjff4ZpjvPZxt

Malware Config

Extracted

Family

darkcomet

Botnet

New-July-July4-01

C2

dgorijan20785.hopto.org:35800

Mutex

DC_MUTEX-U4BEN1Z

Attributes
  • gencode

    8sAQdbHcGDto

  • install

    false

  • offline_keylogger

    true

  • password

    hhhhhh

  • persistence

    false

Signatures

Files

  • d9ec2e333a48365878a8fe44e287111e73e43a8314ab717bfd20f9ef1bde9afc
    .exe windows x86


    Headers

    Sections