Overview

overview

10

Static

static

10

b0f3c28575...ad.exe

windows7-x64

1

b0f3c28575...ad.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    77427e3e01ee0fc863e9bb394efb0115563d63903e5aafa865078703ea8d6ac4

  • Size

    347KB

  • Sample

    240417-pwlb1aha2v

  • MD5

    c4b22bffa053a2aa5b8c30ae3f2cb69d

  • SHA1

    88295d2bba83bed9d18d0bfe56edc18880374de0

  • SHA256

    77427e3e01ee0fc863e9bb394efb0115563d63903e5aafa865078703ea8d6ac4

  • SHA512

    5cfeba7ae7702643ba79375e8167877b02e0477c5d7a1ececdd6049d41c9ac1aa80af3865e36e54bd9dfb2993a89aaa8bcd93f6c17f58ba6512bfe5c466649c8

  • SSDEEP

    6144:+UsYIA/7ttfqrLSNN6o4D2IY49SnqAcS5r3zquklM1z7g3YoRiEt4LsR:wYr/fqrLmco3XnHjsM1oTRuL4

Score
10/10
darkcometguest16upx

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

10.10.0.100:1604

Mutex

DC_MUTEX-F54S21D

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    XEWpnAf1YdiS

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Targets

    • Target

      b0f3c28575628d8d8afde282f1771499cb5272036ada5857eb15e732683692ad.exe

    • Size

      944KB

    • MD5

      afc38a1a7a669ae90d558cef956ba4e8

    • SHA1

      c53fc17b8276a00c6d32e7af3eed2366cb350a62

    • SHA256

      b0f3c28575628d8d8afde282f1771499cb5272036ada5857eb15e732683692ad

    • SHA512

      1d5a6022b3c98fc78d3854ba698d440cd6bd380497c152b64cabc91ceb344824355dcb3692ef94eacb3f8dd2fc82cfa80d466c1c9782a389127e7ca30692d462

    • SSDEEP

      12288:/X2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zb45/:/ss2Sm39NNv9wY7tHwbzfIoK6MA

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks