Overview

overview

10

Static

static

10

NEAS.098a7...80.exe

windows7-x64

10

NEAS.098a7...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.098a7e3cdebd7133166bde22ae45fa80.exe

  • Size

    658KB

  • MD5

    098a7e3cdebd7133166bde22ae45fa80

  • SHA1

    a7ec3be5b63ec7da382cd481928258f281ef62b8

  • SHA256

    1ee8e1785ac53782f5e2c3a032768bca36ca4ed331e078bd6a56bbd58a60c68f

  • SHA512

    84a3f5e5c4d396cafcc2ac5088e3f29c0a9f75807ff47790a690b03fa755573f11af69860b565199fe5d839de1c37ad1f33187e3318674ad5ffd4145fe1d2977

  • SSDEEP

    12288:09HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9EkNC/:4Z1xuVVjfFoynPaVBUR8f+kN10Ed

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-DZJ1KYE

Attributes
  • gencode

    x8e20TJCBpk2

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.098a7e3cdebd7133166bde22ae45fa80.exe
    .exe windows:4 windows x86


    Headers

    Sections