General

  • Target

    DRB50_501377699da121100bc6e9180ecf9471b85264c2ea22641701b7d21995e3c3bb.exe

  • Size

    1.1MB

  • MD5

    a77502350cda394c2d5545f3e0978d6c

  • SHA1

    cd2852066d18f90cccda274627d754cd7a10a901

  • SHA256

    501377699da121100bc6e9180ecf9471b85264c2ea22641701b7d21995e3c3bb

  • SHA512

    230391cfa3c129317c5efc312021acdc7b7f3f7f95639e6f904217eacf83e5e4542000b26530fada8b2e8ed0805dab5851e2a1803e227f9dcaa8fcb6b9558b4c

  • SSDEEP

    24576:D1Z1xuVVjfFoynPaVBUR8f+kN10EBmmbm:DPQDgok30dmbm

Score
10/10

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DRB50_501377699da121100bc6e9180ecf9471b85264c2ea22641701b7d21995e3c3bb.exe
    .exe windows:5 windows x86 arch:x86

    9222d372923baed7aa9dfa28449a94ea


    Headers

    Imports

    Sections