General

  • Target

    e5f403dc7f5cf8b19c34c0e18df8c7aa0fa1dcefcbda3ed4ccc8245d2fc9afc2N.exe

  • Size

    658KB

  • MD5

    63f08d56d87448d1ee8d848074730780

  • SHA1

    4f829a9eb911c3fd129041ad0c9ab478c5309d97

  • SHA256

    e5f403dc7f5cf8b19c34c0e18df8c7aa0fa1dcefcbda3ed4ccc8245d2fc9afc2

  • SHA512

    b4093b9b54ec35c47cd9ac6d5d099a6fbab49400c40220c9a4c98019ad5272a4b5f2769812494d606bbc211fba835c2bc1897d514e31fe949af04d1e936764a7

  • SSDEEP

    12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hd:mZ1xuVVjfFoynPaVBUR8f+kN10EBf

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

kurban

C2

127.0.0.1:1604

Mutex

DC_MUTEX-5CNKKW0

Attributes
  • gencode

    4YZcS9CUbtt5

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e5f403dc7f5cf8b19c34c0e18df8c7aa0fa1dcefcbda3ed4ccc8245d2fc9afc2N.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections