Resubmissions

08/07/2023, 15:12

230708-slh1nsfh9y 10

06/11/2022, 13:11

221106-qeyrfafadk 10

General

  • Target

    Video Russia new.zip

  • Size

    556KB

  • MD5

    a0f2ea43444cb479f9d76867df88377b

  • SHA1

    0561fbd68d2a0b7ad419f4b0a6f606309aa232a8

  • SHA256

    628393c15c8835467bdc4413f830133c7bee6523ce7140b9c38cc376ee711967

  • SHA512

    ffffe6bcb39e67c81841a84532f7c1aeed079f931de6f896b92dc46617538e4f7b6762a3338c8bcb6795085c170b344b532ce6dfd1da642e9a0399da9d631e31

  • SSDEEP

    6144:icNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37aQInCyz0BhkyKgtPXBMeWi+tda:icW7KEZlPzCy37a5ulKgt5tl

Score
10/10

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Video Russia new.zip
    .zip
  • Russia‮4pm.scr
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections