Overview

overview

10

Static

static

10

tmodloader.exe

windows7-x64

10

tmodloader.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    tmodloader.exe

  • Size

    757KB

  • MD5

    4982151d806cb82878e7778db5afff07

  • SHA1

    cbcf57df89ec371cb4fb2af4d42c05872d77d53c

  • SHA256

    9fc5ff772b88e04cb241df1a4eab0789c51bffd790ca500d7d23515d9e902f44

  • SHA512

    56ea136a43e109543e3931c092238c724e3d783d67fd48c90d38b7cddddcd9c06018583ecd60984f53acc8424a949cf9d6f467a28b81d63468d147c9b0f5c916

  • SSDEEP

    12288:t9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hUm:HZ1xuVVjfFoynPaVBUR8f+kN10EB

Score
10/10
sergey2001darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Sergey2001

C2

7.tcp.eu.ngrok.io:10606

Mutex

DC_MUTEX-4C56WJ7

Attributes
  • InstallPath

    fod9SP1-temp-files\msdcsc.exe

  • gencode

    V6k2sRB3QZBz

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    svchost

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmodloader.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections