General

  • Target

    cb58c5a6ea0d8a834de0944da9c090fbf816a8afb150514feb3d979ef319d798.exe

  • Size

    349KB

  • Sample

    250108-cg6yya1mgq

  • MD5

    6e2bfe3d23cdca6de5e1dcb176d7f6df

  • SHA1

    dc1b58ba6fbcb0ccf54756e3b88dc58588330d38

  • SHA256

    cb58c5a6ea0d8a834de0944da9c090fbf816a8afb150514feb3d979ef319d798

  • SHA512

    0bbac9d4a81f3f605c6b2457e8ef13acae1fcf202d00817a8d1dab23b52189ed0f84aa1f8c3c63ab8fed7885826627f8351e07c2ea64ea75d9c66e00a2f8aa9c

  • SSDEEP

    6144:FcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL3771BLLjMdWnpQZh9h4n:FcW7KEZlPzCy37hlMd0QZh9un

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

anonymous666.no-ip.biz:1604

Mutex

DC_MUTEX-VYGS8LY

Attributes
  • gencode

    NMdo6eieyGsM

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      cb58c5a6ea0d8a834de0944da9c090fbf816a8afb150514feb3d979ef319d798.exe

    • Size

      349KB

    • MD5

      6e2bfe3d23cdca6de5e1dcb176d7f6df

    • SHA1

      dc1b58ba6fbcb0ccf54756e3b88dc58588330d38

    • SHA256

      cb58c5a6ea0d8a834de0944da9c090fbf816a8afb150514feb3d979ef319d798

    • SHA512

      0bbac9d4a81f3f605c6b2457e8ef13acae1fcf202d00817a8d1dab23b52189ed0f84aa1f8c3c63ab8fed7885826627f8351e07c2ea64ea75d9c66e00a2f8aa9c

    • SSDEEP

      6144:FcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL3771BLLjMdWnpQZh9h4n:FcW7KEZlPzCy37hlMd0QZh9un

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks