Overview

overview

10

Static

static

10

test.exe

windows7-x64

10

test.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    test.exe

  • Size

    658KB

  • MD5

    fc7ceaf6891495d61942712c5c24b0a5

  • SHA1

    7db80f12c999bea01d58e632ce9e12eac4a49921

  • SHA256

    c6561013c93c1c4f2c73d75209e8bbfb1ab79ad54137766a0c0fa0e1b39fb99c

  • SHA512

    882f5c3037b14b25671772646bad536b459597826757ccd13a51b6d538bf4cb2d5d22a927da487f1645b1c6463611ca5de8c39bf68ca02809ac377c1ee85f6bc

  • SSDEEP

    12288:M9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hQ:gZ1xuVVjfFoynPaVBUR8f+kN10EBq

Score
10/10
guest16_mindarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16_min

C2

bore.pub:8844

Mutex

DCMIN_MUTEX-SPCYDNV

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    lnKxisXJB4xB

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    DarkComet RAT

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows x86

    Password: test123

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections