Details
| Malware Family | DarkComet |
|---|---|
| Date Added | March 23, 2015, 8:29 p.m. |
| MD5 | 43f95b58bc054fcd4a1a0e5d19c3bcc7 |
| Sha256 | 413c73bce872189cf0e95837ceee4c0ac1bbf1461a4835c75c2bd8314e4499d0 |
| Robot | Robots lovingly delivered by robohash.org |
Config Sections
| FTPKeyLogs | |
|---|---|
| OfflineKeylogger | 1 |
| CampaignID | Guest16 |
| FTPSize | |
| FTPHost | |
| FTPPort | |
| FTPRoot | |
| FTPPassword | |
| Version | #KCMDDC51# |
| Mutex | DC_MUTEX-8804A76 |
| Domains | weokktv.ddns.net:1604 |
| Gencode | uu9viQ6sWpur |
| Password | |
| FTPUserName | |
| FireWallBypass | 0 |
Advertising
VirusTotal
50 out of 54 AV's Identified the sample as Malicious
Domain Data
| Domain | IP | Country Code |
|---|---|---|
| weokktv.ddns.net | 78.159.11.103 | FR |
Geo Location
Yara Rules
Comments