Overview

overview

10

Static

static

10

Transformi...ck.exe

windows7-x64

1

Transformi...ck.exe

windows10-2004-x64

1

Transformi...k..exe

windows7-x64

1

Transformi...k..exe

windows10-2004-x64

10

Transformi...CK.exe

windows7-x64

10

Transformi...CK.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    50f85d1218bfd78cbc9b9a3b2ae27e0d

  • Size

    794KB

  • MD5

    50f85d1218bfd78cbc9b9a3b2ae27e0d

  • SHA1

    4f28fbbf73bbb102896ca5aee0a259ef313e5cab

  • SHA256

    6dab7f46d13970c672437ddd1e6dbc9e0895b444af21e172e4caa992674747e0

  • SHA512

    62c76ee3c0a7ed11a75b413ae2b1f90430eac8a9676f7aeea54481606f0fe537150a4e7b52f0270ae3de74357f21dbc28f9c78e852db0b040cde0e448f40ffad

  • SSDEEP

    24576:pAu2fGoX3NhLAuw593fLsebFAuw593fLsebX:pAu2fX7Aum9fIexAum9fIeT

Score
10/10
guest16_mindarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16_min

C2

192.168.1.2:1604

Mutex

DCMIN_MUTEX-ZKRQG0X

Attributes
  • gencode

    tt0A9tl5EFbu

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 50f85d1218bfd78cbc9b9a3b2ae27e0d
    .rar
  • Transformice Fly hack.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections

  • Transformice Teleport hack..exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections

  • Transformice matrix HACK.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections