Overview

overview

10

Static

static

10

cbefac498c...17.exe

windows7-x64

1

cbefac498c...17.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e8f6788eb84d665b94441ca661756ee0a588505956cd551153f06bd676b6c0a

  • Size

    347KB

  • Sample

    240417-pwxd9sha4x

  • MD5

    4798aa74f6a80c360aec84456b22aaff

  • SHA1

    c5a959c88357e899fa6aaf4f178bf9c854697bb4

  • SHA256

    9e8f6788eb84d665b94441ca661756ee0a588505956cd551153f06bd676b6c0a

  • SHA512

    4fb6bf54b40b10d2fe7c779f975634dd823fc4babcfabec0520821b7c582edc4504e67b50976d3b6ad4937fbd543d988b650d3a395078e5f735063785ef51025

  • SSDEEP

    6144:2AE38KdOnUFrFGJbjto+dpcJdlaeSo6yUd0Ab18nsml0UD:djKy6MpJo+dpcJ7aeSoaBbunp0M

Score
10/10
darkcometguest16upx

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

10.10.0.100:1604

Mutex

DC_MUTEX-F54S21D

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    gT3AYpfW5Hj0

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Targets

    • Target

      cbefac498c7c8312dd71565f190ee2394ada2f86c70e41e8f03480a19442ac17.exe

    • Size

      944KB

    • MD5

      456a8f3855395147d46f9add1c2bab3f

    • SHA1

      248eebb5a8083e7dbe4e68db09faaaef9030b1f2

    • SHA256

      cbefac498c7c8312dd71565f190ee2394ada2f86c70e41e8f03480a19442ac17

    • SHA512

      e385892a6c22139b700cbf42ea8ecd02328b66843feea13115546dd7901e93bcfbcdaae794272d10b16994a58cb2d1c2f78383247886c782d1c8baa4d6fb0266

    • SSDEEP

      12288:sX2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zbK8r/:ass2Sm39NNv9wY7tHwbzfIoK6MK6

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks