Overview

overview

10

Static

static

10

easyMalici...d3.exe

windows7-x64

10

easyMalici...d3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    easyMalicious0166f53fa2d3.exe

  • Size

    658KB

  • MD5

    fd462271ac970f965c8c740dbbfe8ca0

  • SHA1

    687b37757d3f53cc7a2ce254a5e47ccb84a2c4e0

  • SHA256

    289403311bfbdc6188284173ab6ad42cd7032f6b17cdf82f9be12dd78d0b4282

  • SHA512

    fc0669cdf15231ed1fd47d93bd10b456e3eda94fd81700b0ea6353b80b18dbc4d5e4bea37420079fcdb2b2d0eccad716b5a7c9db34619688aedb0bada10c8485

  • SSDEEP

    12288:W9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9EkNC/n:yZ1xuVVjfFoynPaVBUR8f+kN10Edn

Score
10/10
lammerdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Lammer

C2

windowsdefender688.ddns.net:1111

Mutex

DCMIN_MUTEX-XW7GJ6L

Attributes
  • InstallPath

    update\explorer.exe

  • gencode

    M3ej1sg5Wwl7

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    explorer

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • easyMalicious0166f53fa2d3.exe
    .exe windows x86


    Headers

    Sections