Overview

overview

10

Static

static

8

478c798cec...5b.exe

windows7_x64

10

478c798cec...5b.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    478c798cecf1d123798b6cb4a98be37082a61f1a36fbda353f3ddac57597845b

  • Size

    318KB

  • Sample

    201109-z7df7fmsas

  • MD5

    6f3d0a03a44e571b7e1dae6f1323e3a5

  • SHA1

    0bcb371da75012f57d57552cc69a536d781eb21f

  • SHA256

    478c798cecf1d123798b6cb4a98be37082a61f1a36fbda353f3ddac57597845b

  • SHA512

    3343f558ade079379011484aae8568fa41d3d15e58656ead5e33f244e910eea72756bfbe0a706a894e1477c62dfd871ab29f4b6d72e55949480816366063d8a2

Score
10/10
darkcometpersistencerattrojanupx

Malware Config

Targets

    • Target

      478c798cecf1d123798b6cb4a98be37082a61f1a36fbda353f3ddac57597845b

    • Size

      318KB

    • MD5

      6f3d0a03a44e571b7e1dae6f1323e3a5

    • SHA1

      0bcb371da75012f57d57552cc69a536d781eb21f

    • SHA256

      478c798cecf1d123798b6cb4a98be37082a61f1a36fbda353f3ddac57597845b

    • SHA512

      3343f558ade079379011484aae8568fa41d3d15e58656ead5e33f244e910eea72756bfbe0a706a894e1477c62dfd871ab29f4b6d72e55949480816366063d8a2

    Score
    10/10
    darkcometpersistencerattrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks