Overview

overview

10

Static

static

10

454545.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    454545.bat

  • Size

    251KB

  • MD5

    65536a1ab3ca68614db44e0ad0dc3c35

  • SHA1

    91b5e08789980eea3f19ed6781161a41ed0b5a4e

  • SHA256

    ee1921a6a02408553d5e6b9092b669c62e253e5d84b11c90742282c206ef08e3

  • SHA512

    0985eb77d3226fedd41c9c0bcdb64c573187255378b28700609cd02f5e6fcf24ae5e1263547eb1d92073c6239ea44544b043c6ff82433333a5352fec01a4e203

  • SSDEEP

    6144:icNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37fwH:icW7KEZlPzCy378

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-JU8ZLT0

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    MZoZepn0RTQT

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 454545.bat
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections