Details
Malware Family DarkComet
Date Added Jan. 7, 2018, 6:25 a.m.
MD5 35956439d2d5d792b8135bf4555b7148
Sha256 7e63e15d6bb8df07e026937a19a73c2c05336e5032057530bf0acf0ffa9f9014
Robot Robots lovingly delivered by robohash.org
Config Sections
MSGICON 0
MSGTITLE Welcome
FTPPORT
FWB 1
FTPROOT
KEYNAME MicroUpdate
MUTEX DC_MUTEX-FUNHQCH
MELT 1
INSTALL 1
SID Guest16
FTPPASS
PERSINST 0
DIRATTRIB 0
FTPUSER
COMBOPATH 7
FTPHOST
FILEATTRIB 0
FTPUPLOADK
FAKEMSG 1
EDTDATE 16/04/2007
PWD
NETDATA karmaa2.ddnsking.com:1605|karmaa2.ddnsking.com:1605|karmaa2.ddnsking.com:1605|karmaa2.ddnsking.com:1605
MSGCORE 57656C636F6D6520746F204461726B436F6D6574205241542E
OFFLINEK 1
GENCODE MyVHhebDTMnG
FTPSIZE
CHANGEDATE 1
EDTPATH MSDCSC\msdcsc.exe
Advertising
VirusTotal

This hash does not exist in virustotal

Domain Data
Domain IP Country Code
karmaa2.ddnsking.com 93.186.154.161 GB
karmaa2.ddnsking.com 93.186.154.161 GB
karmaa2.ddnsking.com 93.186.154.161 GB
karmaa2.ddnsking.com 93.186.154.161 GB
Geo Location
Yara Rules
Comments
comments powered by Disqus