Overview

overview

10

Static

static

10

AiVoice_Editor.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    AiVoice_Editor.exe

  • Size

    658KB

  • MD5

    cd510170be0d353ecc7fee8968b6d844

  • SHA1

    a9cf87e54ddde74b3027a67df66deacf3950b5ec

  • SHA256

    a1c92731bd258ab21621a13e61ad6a79ec07d0f518a3a433dee7c23d008f784f

  • SHA512

    79b91a6e89af09fe012f66acfaabca52ee5e53c40f01ae62e13273c59471fdb2d144e5541a59a10a9d2f129e758cea258e7f4bf1f5067a909653c390b52de6e6

  • SSDEEP

    12288:+9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hy:KZ1xuVVjfFoynPaVBUR8f+kN10EB0

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

than-electoral.gl.at.ply.gg:36364

Mutex

DC_MUTEX-F7E3LWC

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    de1LHCNlVy0t

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AiVoice_Editor.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections