Overview

overview

10

Static

static

8

2840d455697b8c27.scr

windows7_x64

10

2840d455697b8c27.scr

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2840d455697b8c27.scr

  • Size

    290KB

  • Sample

    210615-8bpag33cd2

  • MD5

    5c901f58cd45df80dc1c0bf3c3d2091e

  • SHA1

    6bc38f4a050bcb4dfcee9dc9e29f8f525809a4b9

  • SHA256

    87777a4ebb05314a9a5c267adfd2a5f13041a9b09a3949185b4833d7df040a2f

  • SHA512

    6cde86b989d3d00d645c678c079d1d46e79585e5c657f26db3f4bbf6210ffef8907846b10949ba95559504fb29db8c12ca122a10c0bde17bd17d8600c998b362

Score
10/10
darkcometevasionrattrojanupx

Malware Config

Targets

    • Target

      2840d455697b8c27.scr

    • Size

      290KB

    • MD5

      5c901f58cd45df80dc1c0bf3c3d2091e

    • SHA1

      6bc38f4a050bcb4dfcee9dc9e29f8f525809a4b9

    • SHA256

      87777a4ebb05314a9a5c267adfd2a5f13041a9b09a3949185b4833d7df040a2f

    • SHA512

      6cde86b989d3d00d645c678c079d1d46e79585e5c657f26db3f4bbf6210ffef8907846b10949ba95559504fb29db8c12ca122a10c0bde17bd17d8600c998b362

    Score
    10/10
    darkcometevasionrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Modifies firewall policy service

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks