Overview

overview

10

Static

static

10

32a226964a...4f.exe

windows7-x64

10

32a226964a...4f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32a226964a6a43441fd83f40763aae4f

  • Size

    747KB

  • MD5

    32a226964a6a43441fd83f40763aae4f

  • SHA1

    5f796aab7bd7aef0d0ed3f08a1547731799ec7ce

  • SHA256

    6501e1df2ca602be36aa6b615069264b89135d831a2e46a48796b8d71e4e993b

  • SHA512

    e1ebc51808a02261282926c9c91727a6b5425a049ec28280eaaea7809d4cf4065cd80c133db144c9ca683d90c8be7dde1421232defc86a5a3fda6a3539c687c5

  • SSDEEP

    12288:vk0QVlhmPojAPTMEsUTg0oChO/Q2JbsbjPbN5qhRTtYe3f+Iw86k/R/FFIIhII/:c0QRWoJEfg0oChGdJQbjPbNW5tYeP+GL

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

192.168.2.103:1604

Mutex

DC_MUTEX-C505M8T

Attributes
  • InstallPath

    MSDCSC\win2010.exe

  • gencode

    EdF7vuWm2khN

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    win2010

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 32a226964a6a43441fd83f40763aae4f
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections