General

  • Target

    SynapseX.exe

  • Size

    662KB

  • MD5

    9c548d59bbfb05c0f1de777e4ad690f5

  • SHA1

    ec68c5564acadd4f64f6ce4151a72d6b96fa89ea

  • SHA256

    a7bcd2972b0b478ea0510061d4799b9454a14646009253b87da3493229e784e3

  • SHA512

    4f78941f0966b052cecc3cd5b278849866965b821c82a89991ef71fe331c7f2313a9f95b57089658d03c5e50f42bc57c60d0faa635b38c8f364b4cbf248d516c

  • SSDEEP

    12288:o9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hdF:cZ1xuVVjfFoynPaVBUR8f+kN10EBrF

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

skece

C2

tcp://5.tcp.eu.ngrok.io:19556

Mutex

DC_MUTEX-67FH6JT6

Attributes
  • InstallPath

    MSDCSC\win10defender.exe

  • gencode

    vU2KnHMvXcMY

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SynapseX.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections