General

  • Target

    85c3028acb2dc107b23e518ad67490de1d5cc3e29dae49d5bbfbb2a536ae7cd6.exe

  • Size

    658KB

  • Sample

    250323-p8c66a1vcx

  • MD5

    aa4c07729d3cb9aa68f8acb87bb333f8

  • SHA1

    cfe262a11f4da3aa84d1f99d6316ab0f0e7d79be

  • SHA256

    85c3028acb2dc107b23e518ad67490de1d5cc3e29dae49d5bbfbb2a536ae7cd6

  • SHA512

    e4ca8fa6a14b7b4fb782433bba9f79233847540784e55598ad5564c7143275e4a5bd91a125abd6066616ce9d5e06053ce5f7257e9d46767e4585403f8fd7dc7c

  • SSDEEP

    12288:a9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hc:WZ1xuVVjfFoynPaVBUR8f+kN10EBC

Malware Config

Extracted

Family

darkcomet

Botnet

onEstEnsamble

C2

88.99.61.194:5067

Mutex

DCMIN_MUTEX-A89V5VW

Attributes
  • gencode

    03TlA6qxpLlo

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

rc4.plain

Targets

    • Target

      85c3028acb2dc107b23e518ad67490de1d5cc3e29dae49d5bbfbb2a536ae7cd6.exe

    • Size

      658KB

    • MD5

      aa4c07729d3cb9aa68f8acb87bb333f8

    • SHA1

      cfe262a11f4da3aa84d1f99d6316ab0f0e7d79be

    • SHA256

      85c3028acb2dc107b23e518ad67490de1d5cc3e29dae49d5bbfbb2a536ae7cd6

    • SHA512

      e4ca8fa6a14b7b4fb782433bba9f79233847540784e55598ad5564c7143275e4a5bd91a125abd6066616ce9d5e06053ce5f7257e9d46767e4585403f8fd7dc7c

    • SSDEEP

      12288:a9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hc:WZ1xuVVjfFoynPaVBUR8f+kN10EBC

MITRE ATT&CK Enterprise v15

Tasks