General
-
Target
1524.runddl32.exe.0x400000.dmp
-
Size
712KB
-
Sample
241102-3ewnas1pdj
-
MD5
fb5674ed3bcb7826fefaeb0510f4f9db
-
SHA1
8a41a46c9768160e8394da81904b910898eee1ac
-
SHA256
ca1bdbb3fed60f99d5683b169118989eeb698376981631c90435fd18f6c81759
-
SHA512
9388a3f1664f5b6dd92a646a3e2db22e9cd191fb6149af7330068b8044434e83abf5b1f3c5b0eae3651d6d8dc7059c480c5fd16ae30e681f17e79dd83aa97938
-
SSDEEP
12288:o9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ekyz/9:cZ1xuVVjfFoynPaVBUR8f+kN10Ef
Malware Config
Extracted
darkcomet
Guest16
test213.no-ip.info:1604
DC_MUTEX-KHNEW06
-
InstallPath
MSDCSC\runddl32.exe
-
gencode
F6FE8i2BxCpu
-
install
true
-
offline_keylogger
true
-
persistence
true
-
reg_key
MicroUpdate
Targets
-
-
Target
1524.runddl32.exe.0x400000.dmp
-
Size
712KB
-
MD5
fb5674ed3bcb7826fefaeb0510f4f9db
-
SHA1
8a41a46c9768160e8394da81904b910898eee1ac
-
SHA256
ca1bdbb3fed60f99d5683b169118989eeb698376981631c90435fd18f6c81759
-
SHA512
9388a3f1664f5b6dd92a646a3e2db22e9cd191fb6149af7330068b8044434e83abf5b1f3c5b0eae3651d6d8dc7059c480c5fd16ae30e681f17e79dd83aa97938
-
SSDEEP
12288:o9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ekyz/9:cZ1xuVVjfFoynPaVBUR8f+kN10Ef
Score10/10-
Darkcomet
DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
-
Darkcomet family
-