Overview

overview

10

Static

static

10

gad.exe

windows7-x64

10

gad.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    gad.exe

  • Size

    658KB

  • MD5

    6555b203e43c217b4de4b14e1fbb406e

  • SHA1

    1351cd4244f3e877e9dccf91bd9c9a86fda2496f

  • SHA256

    8eb440e55e72d6b20bd9d66d4b6308986e505cd2d63193b5c287ebe037c6755c

  • SHA512

    265314af4ae0b16dac489df23db380ba1ad09495e66a2aa366f7bcefb66d5f24b7e9bfa9c90d857145a1d3aa40d9674d054a30bf78df645478a7b219269ef561

  • SSDEEP

    12288:y9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hH:eZ1xuVVjfFoynPaVBUR8f+kN10EBR

Score
10/10
guest16_mindarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16_min

C2

21.ip.gl.ply.gg:28767

Mutex

DCMIN_MUTEX-5TDU6DN

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    7pgbWkRjM5Sx

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    DarkComet RAT

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • gad.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections