darkcomet | 3c2bf968ce6d00660bc8ff1b3da5eedb03fe23a53b6b91c55b87449841bfc015 | Triage

Sharing

General

Target

3c2bf968ce6d00660bc8ff1b3da5eedb03fe23a53b6b91c55b87449841bfc015.exe
Size

944KB
Sample

240412-bhr1qsdh8t
MD5

bc29c06f5121d78e8937801addf20802
SHA1

08436f64fee72369bdeae7b0c47a5d238b31c49f
SHA256

3c2bf968ce6d00660bc8ff1b3da5eedb03fe23a53b6b91c55b87449841bfc015
SHA512

c1afb12b714c9f71ee51e6fee22b123c88f1b0cd1b4a66c14383df98f1aa75bc0d32bf6f8327669f4411dca5e789c9e39135fef23ff19cfaaec317e78e38d4e1
SSDEEP

12288:sX2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zb3pH/:ass2Sm39NNv9wY7tHwbzfIoK6M3l

Score

10^/10

darkcomet guest16 upx

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

10.10.0.100:1604

Mutex

DC_MUTEX-F54S21D

Attributes

InstallPath
MSDCSC\msdcsc.exe
gencode
gT3AYpfW5Hj0
install
true
offline_keylogger
true
persistence
false
reg_key
MicroUpdate

Targets

- Target
  
  3c2bf968ce6d00660bc8ff1b3da5eedb03fe23a53b6b91c55b87449841bfc015.exe
- Size
  
  944KB
- MD5
  
  bc29c06f5121d78e8937801addf20802
- SHA1
  
  08436f64fee72369bdeae7b0c47a5d238b31c49f
- SHA256
  
  3c2bf968ce6d00660bc8ff1b3da5eedb03fe23a53b6b91c55b87449841bfc015
- SHA512
  
  c1afb12b714c9f71ee51e6fee22b123c88f1b0cd1b4a66c14383df98f1aa75bc0d32bf6f8327669f4411dca5e789c9e39135fef23ff19cfaaec317e78e38d4e1
- SSDEEP
  
  12288:sX2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zb3pH/:ass2Sm39NNv9wY7tHwbzfIoK6M3l
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

upxguest16darkcomet

behavioral1

behavioral2