General
-
Target
3c2bf968ce6d00660bc8ff1b3da5eedb03fe23a53b6b91c55b87449841bfc015.exe
-
Size
944KB
-
MD5
bc29c06f5121d78e8937801addf20802
-
SHA1
08436f64fee72369bdeae7b0c47a5d238b31c49f
-
SHA256
3c2bf968ce6d00660bc8ff1b3da5eedb03fe23a53b6b91c55b87449841bfc015
-
SHA512
c1afb12b714c9f71ee51e6fee22b123c88f1b0cd1b4a66c14383df98f1aa75bc0d32bf6f8327669f4411dca5e789c9e39135fef23ff19cfaaec317e78e38d4e1
-
SSDEEP
12288:sX2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zb3pH/:ass2Sm39NNv9wY7tHwbzfIoK6M3l
Score
10/10
Malware Config
Extracted
Family
darkcomet
Botnet
Guest16
C2
10.10.0.100:1604
Mutex
DC_MUTEX-F54S21D
Attributes
-
InstallPath
MSDCSC\msdcsc.exe
-
gencode
gT3AYpfW5Hj0
-
install
true
-
offline_keylogger
true
-
persistence
false
-
reg_key
MicroUpdate
Signatures
-
Darkcomet family
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3c2bf968ce6d00660bc8ff1b3da5eedb03fe23a53b6b91c55b87449841bfc015.exe
Headers
Sections