General

  • Target

    cdb36b22cd10e83db9ede69a1a1310f7c8f47317a618f358632983984e9fa1ebN.exe

  • Size

    372KB

  • MD5

    e7dc4c1061bb28708a000dbbaa0c1e70

  • SHA1

    d0517bf0890ffb7c428c299f30044cd8ebe93b4f

  • SHA256

    cdb36b22cd10e83db9ede69a1a1310f7c8f47317a618f358632983984e9fa1eb

  • SHA512

    fe8ba980e9908ac895584e23a9349690b1ff09ebe747d597d1f6a1738b401156b822d9266e537a31fb9e9c710980b0c2fc8d9289cc1e75a7bd1fb36d9f227264

  • SSDEEP

    6144:PKpc81qt4hyEQjVVebk9NGnwZsr3LL8Qetk7sTVHqC/HoC/XPPf9GSfY/:PKpV1qt4/QegGdsU4RKCPP/v4Sg

Score
10/10

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • cdb36b22cd10e83db9ede69a1a1310f7c8f47317a618f358632983984e9fa1ebN.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections