MalwareConfig
Details
<table class="table table-striped table-bordered table-sm">
<tr>
<th>FileName</th>
<td><a href="/stats//"></a></td>
</tr>
<tr>
<th>Malware Family</th>
<td><a href="/stats//">DarkComet</a></td>
</tr>
<tr>
<th>Date Added</th>
<td>2019-02-07 06:25:09</td>
</tr>
<tr>
<th>MD5</th>
<td>da23c1fdc150daca591f708eea1c00ef</td>
</tr>
<tr>
<th>Sha256</th>
<td>11dda7b3ffb57f3484b1a0995bd01a5664fadcad597ce09e7be94254f4688b55</td>
</tr>
<tr>
<th>Robot</th>
<td>Robots lovingly delivered by <a href="https://robohash.org">robohash.org</a></td>
</tr>
</table>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="row mt-5">
<div class="col">
<div class="card">
<div class="card-header">
Advertising
</div>
<div class="card-body">
<!-- ducktoolkit-leaderboard -->
<ins class="adsbygoogle"
style="display:inline-block;width:728px;height:90px"
data-ad-client="ca-pub-1435553701793282"
data-ad-slot="1601555780"></ins>
</div>
</div>
</div>
</div>
<div class="row mt-5">
<div class="col">
<div class="card">
<div class="card-header">
C2 Data
</div>
<table class="table table-striped table-bordered table-sm">
<tr>
<th>FTPSIZE</th>
<td></td>
</tr>
<tr>
<th>SID</th>
<td>COMETDB</td>
</tr>
<tr>
<th>MUTEX</th>
<td>DC_MUTEX-C8X9971</td>
</tr>
<tr>
<th>OFFLINEK</th>
<td>1</td>
</tr>
<tr>
<th>FTPPORT</th>
<td></td>
</tr>
<tr>
<th>GENCODE</th>
<td>nRfxb2G8vinG</td>
</tr>
<tr>
<th>NETDATA</th>
<td>cometdb.ddns.net:1604</td>
</tr>
<tr>
<th>FTPUPLOADK</th>
<td></td>
</tr>
<tr>
<th>FWB</th>
<td>0</td>
</tr>
<tr>
<th>FTPPASS</th>
<td></td>
</tr>
<tr>
<th>FTPHOST</th>
<td></td>
</tr>
<tr>
<th>PWD</th>
<td></td>
</tr>
<tr>
<th>FTPUSER</th>
<td></td>
</tr>
<tr>
<th>FTPROOT</th>
<td></td>
</tr>
</table>
</div>
</div>
</div>
<div class="row mt-5">
<div class="col">
<div class="card">
<div class="card-header">
Virustotal
</div>
<div class="card-body">
<p>62 out of 68 AV Engines identified the sample as Malicious.</p>
<p><a href="https://www.virustotal.com/file/11dda7b3ffb57f3484b1a0995bd01a5664fadcad597ce09e7be94254f4688b55/analysis/1549059700/">Virustotal Report</a></p>
</div>
</div>
</div>
</div>
<div class="row mt-5">
<div class="col">
<div class="card">
<div class="card-header">
C2 Information
</div>
<table class="table table-striped table-bordered table-hover">
<thead class="thead-light">
<tr>
<th scope="col">Domain</th>
<th scope="col">FQDN</th>
<th scope="col">IP</th>
<th scope="col">Country Code</th>
</tr>
</thead>
<tbody>
<tr>
<td>ddns.net</td>
<td>cometdb.ddns.net</td>
<td>128.199.50.200</td>
<td>SG</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>