Details
Malware Family DarkComet
Date Added April 23, 2017, 6:25 a.m.
MD5 74bc77028b5298bf2024e5f332bfaf29
Sha256 b750bed9f38d2807965789bbb2765ee53d73114bbde64ca84dffc130458f5367
Robot Robots lovingly delivered by robohash.org
Config Sections
MSGICON 16
MSGTITLE Windows
FTPPORT
FWB 0
FTPROOT
KEYNAME MicroUpdate
MUTEX DC_MUTEX-LB2XFCD
MELT 0
INSTALL 1
SID Guest16
FTPPASS
PERSINST 0
DIRATTRIB 0
FTPUSER
COMBOPATH 7
FTPHOST
FILEATTRIB 6
FTPUPLOADK
FAKEMSG 1
EDTDATE 16/04/2007
PWD
NETDATA vahdi12.duckdns.org:1604
MSGCORE 7A6161
OFFLINEK 1
GENCODE zjqx6PuvKvcJ
FTPSIZE
CHANGEDATE 1
EDTPATH MSDCSC\msdcsc.exe
Advertising
VirusTotal

This hash does not exist in virustotal

Domain Data
Domain IP Country Code
vahdi12.duckdns.org 158.181.43.253 AZ
Geo Location
Yara Rules
Comments
comments powered by Disqus