Resubmissions

08-07-2023 15:12

230708-slh1nsfh9y 10

06-11-2022 13:11

221106-qeyrfafadk 10

General

  • Target

    Video Russia new.zip

  • Size

    556KB

  • Sample

    230708-slh1nsfh9y

  • MD5

    a0f2ea43444cb479f9d76867df88377b

  • SHA1

    0561fbd68d2a0b7ad419f4b0a6f606309aa232a8

  • SHA256

    628393c15c8835467bdc4413f830133c7bee6523ce7140b9c38cc376ee711967

  • SHA512

    ffffe6bcb39e67c81841a84532f7c1aeed079f931de6f896b92dc46617538e4f7b6762a3338c8bcb6795085c170b344b532ce6dfd1da642e9a0399da9d631e31

  • SSDEEP

    6144:icNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37aQInCyz0BhkyKgtPXBMeWi+tda:icW7KEZlPzCy37a5ulKgt5tl

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

Extracted

Family

darkcomet

Botnet

Guest16

C2

mstelemetry.ignorelist.com:35695

Mutex

DC_MUTEX-KXGKR3L

Attributes
  • InstallPath

    Videos\VideoViewer.exe

  • gencode

    gstrAo53FB9G

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    VideoViewer

Targets

    • Target

      Video Russia new.zip

    • Size

      556KB

    • MD5

      a0f2ea43444cb479f9d76867df88377b

    • SHA1

      0561fbd68d2a0b7ad419f4b0a6f606309aa232a8

    • SHA256

      628393c15c8835467bdc4413f830133c7bee6523ce7140b9c38cc376ee711967

    • SHA512

      ffffe6bcb39e67c81841a84532f7c1aeed079f931de6f896b92dc46617538e4f7b6762a3338c8bcb6795085c170b344b532ce6dfd1da642e9a0399da9d631e31

    • SSDEEP

      6144:icNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37aQInCyz0BhkyKgtPXBMeWi+tda:icW7KEZlPzCy37a5ulKgt5tl

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks