Details
Malware Family DarkComet
Date Added July 24, 2018, 6:25 a.m.
MD5 3bf4ca4b7ca94f37cbffa6061e488499
Sha256 09da1d057f251084f2028a1daa6d470941da80b15db984e96017e1decbfee914
Robot Robots lovingly delivered by robohash.org
Config Sections
FTPPORT
FWB 0
FTPROOT
KEYNAME MicroUpdate
MUTEX DC_MUTEX-T3XZ73N
MELT 0
INSTALL 1
SID PUBG
FTPPASS
PERSINST 0
DIRATTRIB 6
FTPUSER
SH5 1
COMBOPATH 7
FTPHOST
FILEATTRIB 6
FTPUPLOADK
EDTDATE 16/04/2007
PERS 1
PWD
NETDATA beratrat.duckdns.org:81
SH9 1
OFFLINEK 1
GENCODE T10vAHTR9jir
FTPSIZE
CHANGEDATE 1
EDTPATH MSDCSC\msdcsc.exe
Advertising
VirusTotal

60 out of 65 AV's Identified the sample as Malicious

Virus Total Report

Domain Data
Domain IP Country Code
beratrat.duckdns.org 88.230.161.30 TR
Geo Location
Yara Rules
Comments
comments powered by Disqus