Overview

overview

10

Static

static

10

6fb8e87b68...cf.exe

windows7-x64

1

6fb8e87b68...cf.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9c34a084a1ed631491aad61814776d97ed4db1e6a1a39ca8b5101430818f9f1

  • Size

    351KB

  • Sample

    240417-pwppesha3s

  • MD5

    8ff680f196b0c7417ffa3f94f0cd936c

  • SHA1

    53e1200f7744d01c919d38be6a82b725ad3975d0

  • SHA256

    d9c34a084a1ed631491aad61814776d97ed4db1e6a1a39ca8b5101430818f9f1

  • SHA512

    05a7f3494938f4bd87dd15238049dfbdb286aa8e18e30ed0f9ad9acb4d92643e5643f2e030c5089b009c297d835e877c9dfd5b306f5724906cc8b2a569c53a4f

  • SSDEEP

    6144:wvDHnZOYadjtKI7It5kUU4vP6TT9LItkxHzGMCgkrUjMgpuvGH/dQHWmpFgEX8OA:wvDHnZOYaGn55XP63Re6HzGv3uMrvGfx

Score
10/10
darkcometguest16upx

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

10.10.0.100:1604

Mutex

DC_MUTEX-F54S21D

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    4iFjVwZK72Tx

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Targets

    • Target

      6fb8e87b68f7de6ee4600a81c1b36c7a0bdebb2bafbadfaa6cafabfb37406fcf.exe

    • Size

      955KB

    • MD5

      94dd19d83f5fdb372a22c3803558483b

    • SHA1

      34b0185ab9edebe19dbe2f8bbb6c00fe460e9496

    • SHA256

      6fb8e87b68f7de6ee4600a81c1b36c7a0bdebb2bafbadfaa6cafabfb37406fcf

    • SHA512

      24fbfc7013ea3de9db961ad02bb1439fe69ce070bfb74bf127c2fd5b104fc34ff737723479d081a985a2df6c8890a67b677ad19d136e6ad85da78e97f4fb11da

    • SSDEEP

      12288:/X2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zbNV/:/ss2Sm39NNv9wY7tHwbzfIoK6ML

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks