General

  • Target

    12be40258eaa9732f0ab7764c80d258b10bb5d07cb7497aaca0e26a99a3c7eb0N.exe

  • Size

    658KB

  • MD5

    6fe02bea848afead778291d08c5a1b60

  • SHA1

    1153d0d6d30db6dda34a5fd5939d48db7451b69c

  • SHA256

    12be40258eaa9732f0ab7764c80d258b10bb5d07cb7497aaca0e26a99a3c7eb0

  • SHA512

    8426c7727d8f1df97108a7d83d742b9bc1b711d5f8267a4a037e91f6eeee82a105d6090029c5cf4e89a26224e1685241b51c1e47e1d7adda91ad7cf4fe59a97e

  • SSDEEP

    12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hJ:uZ1xuVVjfFoynPaVBUR8f+kN10EBz

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

benben12.zapto.org:2255

Mutex

DC_MUTEX-U0PAEKZ

Attributes
  • gencode

    Vvto9tVYieEb

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 12be40258eaa9732f0ab7764c80d258b10bb5d07cb7497aaca0e26a99a3c7eb0N.exe
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections