Overview

overview

10

Static

static

10

77058147d3...e8.exe

windows7-x64

10

77058147d3...e8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    77058147d37749df7378249a128a5298de49787eba629b634090849456774ce8.exe

  • Size

    663KB

  • MD5

    8231d8d9d1c38a7f2ebce20944bcfc63

  • SHA1

    ca190e6cab231bd140dab3a13c7a59cb88c85e7b

  • SHA256

    77058147d37749df7378249a128a5298de49787eba629b634090849456774ce8

  • SHA512

    8025a7c2231a562bf4d0ff76a813585606462a51a1b76a34d54f0640b4f591d8abdc32928795162f987f6dfd42f16e10c340f27a62ad87b18cec81bdb9a68cc2

  • SSDEEP

    12288:+9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9EkNC/:KZ1xuVVjfFoynPaVBUR8f+kN10Ed

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

80.222.152.67:80

Mutex

DC_MUTEX-QWMWN2U

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    hdQRh37piHv1

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 77058147d37749df7378249a128a5298de49787eba629b634090849456774ce8.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections