Overview

overview

10

Static

static

10

easy_Malic...51.exe

windows7-x64

10

easy_Malic...51.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    easy_Malicious_2f13e470c89595e376fd714b7cc489469597c3c982b93b824c35f4975cf64d51.exe

  • Size

    659KB

  • MD5

    f9a185bdb073209cfea16896314cab6b

  • SHA1

    e712b6f877773491e9b0806fb9d3c56f75262ee3

  • SHA256

    bcec5a74d411a7107e1859cd84417e7c6016297eba5dea50aa3719fee53988bf

  • SHA512

    8b7d4d2d2b04bed49d81b123ef831f56c7fc80bbb5d6093f2678e6cd33c69d9b3274544feab32bc1f4e363f46879d9485efcba3b1ca8a31a7c712a2c2a969595

  • SSDEEP

    12288:q9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFQa:miBIGkbxqEcjsWiDxguehC2Si

Score
10/10
loldarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

lol

C2

192.168.1.66:8888

192.168.1.66:8

192.168.1.66:80
Mutex

DC_MUTEX-U1P80HB

Attributes
  • InstallPath

    xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.exe

  • gencode

    Z7QGpBkZyFk7

  • install

    true

  • offline_keylogger

    true

  • password

    546klcp8888

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • easy_Malicious_2f13e470c89595e376fd714b7cc489469597c3c982b93b824c35f4975cf64d51.exe
    .exe windows x86

    8033c11f8a2fdfc317e8655120579933


    Headers

    Imports

    Sections