Overview

overview

10

Static

static

10

easyMalici...dd.exe

windows7-x64

10

easyMalici...dd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    easyMalicious25d11c0a8ddd.exe

  • Size

    251KB

  • MD5

    defef7318f7b0832c7a288427a2dbb04

  • SHA1

    860b5c54ebcabcca49439f60ccc6ee26441358e5

  • SHA256

    658ade0ace66a3f57d61f54c1ce3c0e2c7feb32f8f095eeb6279014d0c2303ec

  • SHA512

    d19aa84b271d0a1b04739b989204f9ee8cd9d2b150879fefa81b7269c66c88c579e35edb1a9c4dceed16b7797d8dd2d981efcf971c164b97b3a15b0ebe1c29b2

  • SSDEEP

    6144:WcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37g:WcW7KEZlPzCy37g

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-3MAARYD

Attributes
  • gencode

    8QXSopZDBqyi

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • easyMalicious25d11c0a8ddd.exe
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections