General

  • Target

    ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8.exe

  • Size

    372KB

  • MD5

    d1f5070ca9694e8a8a191e20716f2866

  • SHA1

    2accfe7f6499a5277a6da62ff0eacbffb1d6eaab

  • SHA256

    ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8

  • SHA512

    c878d2ffb11e5c121429fedde8b34fb6d6b5e5507c5557ec749ed887fc89de3c71c621286ff32557955f2acda063ac8d37ca718ba33b386e22beb100dddc52a4

  • SSDEEP

    6144:PKpc81qt4hyEQjVVebk9NGnwZsr3LL8Qetk7sTVHqC/HoC/XPPf9GSfY/a:PKpV1qt4/QegGdsU4RKCPP/v4SgS

Score
10/10

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Signatures

  • Darkcomet family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections