Overview

overview

10

Static

static

10

VirusShare...10.exe

windows7-x64

10

VirusShare...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VirusShare_0011e3f0a6f0e6c7338d60384c2be510

  • Size

    658KB

  • Sample

    250217-2ttxksvrz7

  • MD5

    0011e3f0a6f0e6c7338d60384c2be510

  • SHA1

    15daa5cd32a3f036eaebc0be3b1a6c05f85c47eb

  • SHA256

    e82db89603da26ffb02363960039eed2b3a53eafe48797a14e58a321f6e10afc

  • SHA512

    a50a1d0b69ec02b58bbc50a29c18854e354341c3446f6832b5a14f953e75b239079f9707539b2420158a148252f1a21451779b6e531cb3dbeab135206cc3b616

  • SSDEEP

    12288:i9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hn:OZ1xuVVjfFoynPaVBUR8f+kN10EB5

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

biggee.no-ip.biz:200

Mutex

DC_MUTEX-2F1M79Z

Attributes
  • gencode

    Eehnbfv9GmQE

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      VirusShare_0011e3f0a6f0e6c7338d60384c2be510

    • Size

      658KB

    • MD5

      0011e3f0a6f0e6c7338d60384c2be510

    • SHA1

      15daa5cd32a3f036eaebc0be3b1a6c05f85c47eb

    • SHA256

      e82db89603da26ffb02363960039eed2b3a53eafe48797a14e58a321f6e10afc

    • SHA512

      a50a1d0b69ec02b58bbc50a29c18854e354341c3446f6832b5a14f953e75b239079f9707539b2420158a148252f1a21451779b6e531cb3dbeab135206cc3b616

    • SSDEEP

      12288:i9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hn:OZ1xuVVjfFoynPaVBUR8f+kN10EB5

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks