darkcomet | a516be7136423582f559a850db3aa2a3aeff45501daafb0e90df7e13939db654 | Triage

Sharing

General

Target

a516be7136423582f559a850db3aa2a3aeff45501daafb0e90df7e13939db654
Size

944KB
Sample

240413-an666sbf4y
MD5

392f631bcb38794404afe35ffc3d9971
SHA1

8022203d64c54f8e189fb9389831e29996254cf2
SHA256

a516be7136423582f559a850db3aa2a3aeff45501daafb0e90df7e13939db654
SHA512

d0c0565d33566918c2cb2017b2e387bb61d38217a545d91fa79957c60423ab70c84a1603f02d4c3c7ea7ff3314b5cf97f4f5717e1c3b7ba1bf2f448f8c757305
SSDEEP

12288:hX2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zb7t/r:tss2Sm39NNv9wY7tHwbzfIoK6MJr

Score

10^/10

darkcomet guest16 upx

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

10.10.0.100:1604

Mutex

DC_MUTEX-F54S21D

Attributes

InstallPath
MSDCSC\msdcsc.exe
gencode
4iFjVwZK72Tx
install
true
offline_keylogger
true
persistence
false
reg_key
MicroUpdate

Targets

- Target
  
  a516be7136423582f559a850db3aa2a3aeff45501daafb0e90df7e13939db654
- Size
  
  944KB
- MD5
  
  392f631bcb38794404afe35ffc3d9971
- SHA1
  
  8022203d64c54f8e189fb9389831e29996254cf2
- SHA256
  
  a516be7136423582f559a850db3aa2a3aeff45501daafb0e90df7e13939db654
- SHA512
  
  d0c0565d33566918c2cb2017b2e387bb61d38217a545d91fa79957c60423ab70c84a1603f02d4c3c7ea7ff3314b5cf97f4f5717e1c3b7ba1bf2f448f8c757305
- SSDEEP
  
  12288:hX2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zb7t/r:tss2Sm39NNv9wY7tHwbzfIoK6MJr
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

upxguest16darkcomet

behavioral1

behavioral2