General

  • Target

    29abd6416a2eaf89a78c25fbcbfe5d04a19d6cfe2f9e3c511c0ae961ef0ec35c.exe

  • Size

    658KB

  • Sample

    241222-dffwss1lek

  • MD5

    b4a45c559be3d8073dc4545e73d00d10

  • SHA1

    300470295d21fadf8a871e55b7e2bb75531c658a

  • SHA256

    29abd6416a2eaf89a78c25fbcbfe5d04a19d6cfe2f9e3c511c0ae961ef0ec35c

  • SHA512

    d930f9384cdaa683eec2ed4241c25b824976e426c145f6dcbeb013172cc0608f5d372c8286465b038ffcdacf4589373fe191fe6f07fbda1aca018ff0fac4f068

  • SSDEEP

    12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hR:GZ1xuVVjfFoynPaVBUR8f+kN10EBj

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

pepsiano.ddns.net:999

Mutex

DC_MUTEX-DX5C6V9

Attributes
  • gencode

    msLkl27aCBbw

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      29abd6416a2eaf89a78c25fbcbfe5d04a19d6cfe2f9e3c511c0ae961ef0ec35c.exe

    • Size

      658KB

    • MD5

      b4a45c559be3d8073dc4545e73d00d10

    • SHA1

      300470295d21fadf8a871e55b7e2bb75531c658a

    • SHA256

      29abd6416a2eaf89a78c25fbcbfe5d04a19d6cfe2f9e3c511c0ae961ef0ec35c

    • SHA512

      d930f9384cdaa683eec2ed4241c25b824976e426c145f6dcbeb013172cc0608f5d372c8286465b038ffcdacf4589373fe191fe6f07fbda1aca018ff0fac4f068

    • SSDEEP

      12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hR:GZ1xuVVjfFoynPaVBUR8f+kN10EBj

MITRE ATT&CK Enterprise v15

Tasks