General

  • Target

    e5f403dc7f5cf8b19c34c0e18df8c7aa0fa1dcefcbda3ed4ccc8245d2fc9afc2N.exe

  • Size

    658KB

  • Sample

    241207-31l1zs1mcx

  • MD5

    63f08d56d87448d1ee8d848074730780

  • SHA1

    4f829a9eb911c3fd129041ad0c9ab478c5309d97

  • SHA256

    e5f403dc7f5cf8b19c34c0e18df8c7aa0fa1dcefcbda3ed4ccc8245d2fc9afc2

  • SHA512

    b4093b9b54ec35c47cd9ac6d5d099a6fbab49400c40220c9a4c98019ad5272a4b5f2769812494d606bbc211fba835c2bc1897d514e31fe949af04d1e936764a7

  • SSDEEP

    12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hd:mZ1xuVVjfFoynPaVBUR8f+kN10EBf

Malware Config

Extracted

Family

darkcomet

Botnet

kurban

C2

127.0.0.1:1604

Mutex

DC_MUTEX-5CNKKW0

Attributes
  • gencode

    4YZcS9CUbtt5

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      e5f403dc7f5cf8b19c34c0e18df8c7aa0fa1dcefcbda3ed4ccc8245d2fc9afc2N.exe

    • Size

      658KB

    • MD5

      63f08d56d87448d1ee8d848074730780

    • SHA1

      4f829a9eb911c3fd129041ad0c9ab478c5309d97

    • SHA256

      e5f403dc7f5cf8b19c34c0e18df8c7aa0fa1dcefcbda3ed4ccc8245d2fc9afc2

    • SHA512

      b4093b9b54ec35c47cd9ac6d5d099a6fbab49400c40220c9a4c98019ad5272a4b5f2769812494d606bbc211fba835c2bc1897d514e31fe949af04d1e936764a7

    • SSDEEP

      12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hd:mZ1xuVVjfFoynPaVBUR8f+kN10EBf

MITRE ATT&CK Enterprise v15

Tasks