Overview

overview

10

Static

static

3

4aa8a6a3a2...43.exe

windows7-x64

10

4aa8a6a3a2...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4aa8a6a3a22ff45d320e0091e958414928efa41a6568697d692e759380550643

  • Size

    234KB

  • Sample

    250221-3my4dssqat

  • MD5

    069fdb1fdc215096690350a94e93375a

  • SHA1

    073a4440d94a028d8a1b2f5a5f901e0f10330cb1

  • SHA256

    4aa8a6a3a22ff45d320e0091e958414928efa41a6568697d692e759380550643

  • SHA512

    6502b2ef49a47a6e57367eec37c06cf363cf7a5fd4f6ea7d8d619d65b87f2904ac46d8a1183a69cb68d55e030f1fc4cda567041b619d2bbbeb47b7f9204e45fb

  • SSDEEP

    3072:PY/ygXnCQUYy9yxhjrSsplyU5iHquGbT47mJaCki/q/7NRgOYromMD8goZ9yz28O:PYLtU7Ixhnhz5TN6mJWd/7qMD8gmggf

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-9Y06VKV

Attributes
  • gencode

    hnxaJ4nL0gWS

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      4aa8a6a3a22ff45d320e0091e958414928efa41a6568697d692e759380550643

    • Size

      234KB

    • MD5

      069fdb1fdc215096690350a94e93375a

    • SHA1

      073a4440d94a028d8a1b2f5a5f901e0f10330cb1

    • SHA256

      4aa8a6a3a22ff45d320e0091e958414928efa41a6568697d692e759380550643

    • SHA512

      6502b2ef49a47a6e57367eec37c06cf363cf7a5fd4f6ea7d8d619d65b87f2904ac46d8a1183a69cb68d55e030f1fc4cda567041b619d2bbbeb47b7f9204e45fb

    • SSDEEP

      3072:PY/ygXnCQUYy9yxhjrSsplyU5iHquGbT47mJaCki/q/7NRgOYromMD8goZ9yz28O:PYLtU7Ixhnhz5TN6mJWd/7qMD8gmggf

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks