Extracted

• • Target

    6eab736495f914d3adffd4cf0a923d36

  • Size

    658KB

  • MD5

    6eab736495f914d3adffd4cf0a923d36

  • SHA1

    96134248a09a77b7960bac38a441538a76ca5a7c

  • SHA256

    1cdca2d78597458423dae50d4c693e5d6fed8bd2ef0cc83f08e3dce36225bd92

  • SHA512

    ac783fc437db544c6407da4e6bbf4619c5ad917bb1165ca2064305b015f292dba8edbf96ac298246cee3fe86f4b07a87c9808141a0a9e8d007d1d4483f872e20

  Score

  10^/10

  darkcometmitakacskapersistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Modifies WinLogon for persistence

    persistence

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2