General

  • Target

    588e9bec8b2243fa730e1f93fe737eae5eb8a8c4bf5acb6ecaaa03daba8472eaN.exe

  • Size

    658KB

  • Sample

    241222-byh3rsxrfk

  • MD5

    d27eff59a5a4da0734651ac3215e8eb0

  • SHA1

    78da5770987719bc383149e6af1b1dfb9c211fa3

  • SHA256

    588e9bec8b2243fa730e1f93fe737eae5eb8a8c4bf5acb6ecaaa03daba8472ea

  • SHA512

    80247b050ec94ba7a1eb54766f7daa4a1f678b22312cdd5fed0dab028804825ae9be7c00ef0025db4889d574ee0a21f7ca8f6d21d29f7e5bff286ed7f56c96dc

  • SSDEEP

    12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hT:GZ1xuVVjfFoynPaVBUR8f+kN10EBJ

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

pepsiano.ddns.net:999

Mutex

DC_MUTEX-DX5C6V9

Attributes
  • gencode

    msLkl27aCBbw

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      588e9bec8b2243fa730e1f93fe737eae5eb8a8c4bf5acb6ecaaa03daba8472eaN.exe

    • Size

      658KB

    • MD5

      d27eff59a5a4da0734651ac3215e8eb0

    • SHA1

      78da5770987719bc383149e6af1b1dfb9c211fa3

    • SHA256

      588e9bec8b2243fa730e1f93fe737eae5eb8a8c4bf5acb6ecaaa03daba8472ea

    • SHA512

      80247b050ec94ba7a1eb54766f7daa4a1f678b22312cdd5fed0dab028804825ae9be7c00ef0025db4889d574ee0a21f7ca8f6d21d29f7e5bff286ed7f56c96dc

    • SSDEEP

      12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hT:GZ1xuVVjfFoynPaVBUR8f+kN10EBJ

MITRE ATT&CK Enterprise v15

Tasks