Overview

overview

10

Static

static

10

123.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    123.exe

  • Size

    756KB

  • MD5

    582e4b5695eb0a820697c02d1f73366d

  • SHA1

    983a481382f49335c74ceff616a7e59253ca7707

  • SHA256

    ddc41b423cac82b9364008f53d63fb544f7a82bd46c248f4cd6be32d2c33b637

  • SHA512

    a9b89b26e1f72f81eb9583e88dca4902afdd997dd9e36ded916e2241b4a75f479a7df0faa678c3bb6825622f7b98f7eddde85fb03a2ac6ce0f759dfb5e4c7dcf

  • SSDEEP

    12288:W9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/heqMd0QZhr:yZ1xuVVjfFoynPaVBUR8f+kN10EB8D0w

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

opportunity-mandate.gl.at.ply.gg:18976

Mutex

DC_MUTEX-0D8AACQ

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    7xscaHGBXpRn

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 123.exe
    .exe windows x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections