Overview

overview

10

Static

static

10

123.exe

windows7-x64

10

123.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    123.exe

  • Size

    658KB

  • MD5

    0c2122de1d9ef04a16f8c7fde165b05c

  • SHA1

    c4750e5479b8feb98d60138602c389f563ac272b

  • SHA256

    800188a364c733428082e945b052c227aff3d453006b4774bf2e3c1f137998ba

  • SHA512

    4a0ad47fd80c4d890d8ca0ffc1c4817425f849ad890476b5ab2b22f6239efb16c654757a1c4953861dc830543110d851b1464089f4cfbf03238aade5d4943770

  • SSDEEP

    12288:S9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h0:+Z1xuVVjfFoynPaVBUR8f+kN10EBC

Score
10/10
guest16_mindarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16_min

C2

politics-installing.gl.at.ply.gg:59813

Mutex

DCMIN_MUTEX-TK9YCV2

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    YVGhoVbaz4u7

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    DarkComet RAT

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 123.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections