Overview

overview

10

Static

static

10

d9d705a576...58.exe

windows7-x64

1

d9d705a576...58.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d4abee16fb8f06376c64df9595c24b5c7d8c292bf49280b46113dba9219f80a9

  • Size

    351KB

  • Sample

    240417-pwz56aha41

  • MD5

    11d49b7b599a5b8964db992c20799e43

  • SHA1

    6ebdbbc391708e602378ce901f7e7b2ff4a2e533

  • SHA256

    d4abee16fb8f06376c64df9595c24b5c7d8c292bf49280b46113dba9219f80a9

  • SHA512

    ebe406d7f76baa5131daa6bfb2db1e3768577c27f601b3cda015482c6061032f7c2b1cd714062f4d9382e483f521c13fea642fd551e6fc2ce205581b6ac6573e

  • SSDEEP

    6144:lvvYyFgDMY50EKXpRtdcNW4euiC2BOWrmZO5ReLZRcsDnvAJ/F/sp3VrUKcKk:lIR50EgpRtKNpcC2BkA5RefDvAJ9/spI

Score
10/10
darkcometguest16upx

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

10.10.0.100:1604

Mutex

DC_MUTEX-F54S21D

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    gT3AYpfW5Hj0

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Targets

    • Target

      d9d705a576cd648367347144e2bbacd697982b703fb0fdec295e5cd81968a858.exe

    • Size

      955KB

    • MD5

      1f5f44a1bb3a084bd08fddfcaec1e2b7

    • SHA1

      3d7936875aa22c15878308805f143270ab5f0dfe

    • SHA256

      d9d705a576cd648367347144e2bbacd697982b703fb0fdec295e5cd81968a858

    • SHA512

      887fe7432e0b562dd2df9a2a204908e8ebe2d64c2de84eb80165f6265d7209f95e1b888338f60db50306e332e0d0452cb4756861c3b43a660899fa3cd42fd096

    • SSDEEP

      12288:KX2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zbe3/:Uss2Sm39NNv9wY7tHwbzfIoK6M8

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks