Overview

overview

10

Static

static

10

easyMalici...50.exe

windows7-x64

10

easyMalici...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    easyMalicious2859107c3d50.exe

  • Size

    658KB

  • MD5

    5732a4942827d8f80a78d8f805523cbb

  • SHA1

    37eafbad76ab48ae57da43fd1a252117e5672c78

  • SHA256

    7594114314659531ee7dfa93cc3ee2634253c6183635c25e78cfdecd01a9bfc3

  • SHA512

    cf220d05a732b08405cf0854b85746de6ef2ce4975192b6c060656f6445c13b4dc975faa1cd187691ca42e6814cf9cff6223922c67f8c56cc1c733562ec25964

  • SSDEEP

    12288:S9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFf:+iBIGkbxqEcjsWiDxguehC2SQ

Score
10/10
alldarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

all

C2

80.237.79.161:1604

80.237.79.161:80

80.237.79.161:81
Mutex

DC_MUTEX-BYZA0SZ

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    crUlLhqEsUMC

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • easyMalicious2859107c3d50.exe
    .exe windows x86

    8033c11f8a2fdfc317e8655120579933


    Headers

    Imports

    Sections