General
-
Target
955b62ffc54569f752891772364d6ee5e8034649137cb9f3cebbd3055d5bc8ad
-
Size
347KB
-
MD5
bbfe44789b2a35c198c1b3b091064feb
-
SHA1
b247d33ccac769d48ec12bc558b8c01ee3247515
-
SHA256
955b62ffc54569f752891772364d6ee5e8034649137cb9f3cebbd3055d5bc8ad
-
SHA512
4fd4658aad3cbe388956ed12e6d1a61a8dfedf452b43b1f0e876218ea969e1619a306506d086df3d84541ef61dd9cb37e695b3a8675bccce90e16368f893de2e
-
SSDEEP
6144:sXdZIstj2d5yr/+hyIyWeTsnekoRwq0Z272tGH49989yTgJBa4QD417NYv8:sNZDj8czPIek5/ZIDA96gd42sJ
Score
10/10
Malware Config
Extracted
Family
darkcomet
Botnet
Guest16
C2
10.10.0.100:1604
Mutex
DC_MUTEX-F54S21D
Attributes
-
InstallPath
MSDCSC\msdcsc.exe
-
gencode
gT3AYpfW5Hj0
-
install
true
-
offline_keylogger
true
-
persistence
false
-
reg_key
MicroUpdate
Signatures
-
Darkcomet family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
955b62ffc54569f752891772364d6ee5e8034649137cb9f3cebbd3055d5bc8ad
Password: infected
-
3c2bf968ce6d00660bc8ff1b3da5eedb03fe23a53b6b91c55b87449841bfc015.exe
Headers
Sections