General
-
Target
6514c07cc8c4c8eec0497429b2740aaa63472c91916956c08612f2ed0b11af5a
-
Size
343KB
-
Sample
250227-2r4zrsssfy
-
MD5
77fd5c6a7ed616d1146a055a9aa58720
-
SHA1
cafacc26a98e13c768eeea3bba37973db58453c3
-
SHA256
6514c07cc8c4c8eec0497429b2740aaa63472c91916956c08612f2ed0b11af5a
-
SHA512
65fa1be05fc3df2caab383fb82af5b619ee1caedab09689878f596596ebf2972ec450fc24ae9e4c27f1639cbcac26c4b7898fa8c95ae27d4fbddb5df228f112f
-
SSDEEP
6144:XYLtU7Ixhnhz5TN6mJWd/7qMD8gmggfojeGbfUTpYDDmu/+3fbN:osI3lFZWdqswtfJG+pG/YN
Static task
static1
Behavioral task
behavioral1
Sample
6514c07cc8c4c8eec0497429b2740aaa63472c91916956c08612f2ed0b11af5a.exe
Resource
win7-20240903-en
Malware Config
Extracted
darkcomet
Guest16
159.146.115.189:3131
DC_MUTEX-6VU05UR
-
gencode
FbWUotbhX9sQ
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
6514c07cc8c4c8eec0497429b2740aaa63472c91916956c08612f2ed0b11af5a
-
Size
343KB
-
MD5
77fd5c6a7ed616d1146a055a9aa58720
-
SHA1
cafacc26a98e13c768eeea3bba37973db58453c3
-
SHA256
6514c07cc8c4c8eec0497429b2740aaa63472c91916956c08612f2ed0b11af5a
-
SHA512
65fa1be05fc3df2caab383fb82af5b619ee1caedab09689878f596596ebf2972ec450fc24ae9e4c27f1639cbcac26c4b7898fa8c95ae27d4fbddb5df228f112f
-
SSDEEP
6144:XYLtU7Ixhnhz5TN6mJWd/7qMD8gmggfojeGbfUTpYDDmu/+3fbN:osI3lFZWdqswtfJG+pG/YN
-
Darkcomet family
-
Ramnit family
-
Executes dropped EXE
-
Loads dropped DLL
-