General
-
Target
https://mega.nz/file/ocx3DKyL#jsdaswUWznptm9hz7qSnGPU3Jy9hTlE3aRzrpmNIzxM
-
Sample
240419-b4jw9aec3t
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mega.nz/file/ocx3DKyL#jsdaswUWznptm9hz7qSnGPU3Jy9hTlE3aRzrpmNIzxM
Resource
win11-20240412-en
windows11-21h2-x64
14 signatures
600 seconds
Malware Config
Extracted
Family
darkcomet
Botnet
2014
C2
bluebebe.no-ip.biz:12345
Mutex
DC_MUTEX-MPU5N1Y
Attributes
-
InstallPath
MSDCSC\msdcsc.exe
-
gencode
06nRcZVDGr3l
-
install
true
-
offline_keylogger
true
-
persistence
false
-
reg_key
MicroUpdate
Targets
-
-
Target
https://mega.nz/file/ocx3DKyL#jsdaswUWznptm9hz7qSnGPU3Jy9hTlE3aRzrpmNIzxM
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Adds Run key to start application
-