General

  • Target

    0c5223135705127340de474101377fe5

  • Size

    421KB

  • MD5

    0c5223135705127340de474101377fe5

  • SHA1

    985e77a2140c0a550969a852f562d5b3a0ac54fb

  • SHA256

    754209056906ab5fb4674fd3c8e40983ed049296caee2c84be14b97d890a73c7

  • SHA512

    19919f2f3bc14eec61169305093af95d45719a80b3bef49310432897fa62bdb9ef5f17495183583e3c7a21c4e15b4e7a3340442f26064768da2ab8c3eaea4319

  • SSDEEP

    6144:PMg79ZIqzIKS6FiBxZJ0w1lSWdWIYhwYS8df0eiHvPiiUQ:PMg7wqli7zLXSVIYhwYS8diii

Score
10/10

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c5223135705127340de474101377fe5
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections