Overview

overview

10

Static

static

10

4f12b16b29...98.exe

windows7_x64

10

4f12b16b29...98.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f12b16b29502e793037b26141f99a2272965bbe237a3475243c5f19f6e6c898

  • Size

    722KB

  • Sample

    210515-v627ctsj4j

  • MD5

    744907fcecbf352318db5953d862fe98

  • SHA1

    22cc67f8374704fb18b0fc7693ef39e41373abcb

  • SHA256

    4f12b16b29502e793037b26141f99a2272965bbe237a3475243c5f19f6e6c898

  • SHA512

    36f7163f5e53abedf7c92c31b70e8d02e9bb22ded2c9bdeb4e696c64b35e42c0f40f79b16949c6b4b4d262c7de05a1fa9780ff22b781d98574217806cdfcbaab

Score
10/10
darkcometrattrojan

Malware Config

Targets

    • Target

      4f12b16b29502e793037b26141f99a2272965bbe237a3475243c5f19f6e6c898

    • Size

      722KB

    • MD5

      744907fcecbf352318db5953d862fe98

    • SHA1

      22cc67f8374704fb18b0fc7693ef39e41373abcb

    • SHA256

      4f12b16b29502e793037b26141f99a2272965bbe237a3475243c5f19f6e6c898

    • SHA512

      36f7163f5e53abedf7c92c31b70e8d02e9bb22ded2c9bdeb4e696c64b35e42c0f40f79b16949c6b4b4d262c7de05a1fa9780ff22b781d98574217806cdfcbaab

    Score
    10/10
    darkcometrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Drops file in Drivers directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks