Overview

overview

10

Static

static

492c4e86ab...e3.exe

windows7_x64

10

492c4e86ab...e3.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    492c4e86ab5eed732e29f109cb48dbef64ca7471cd2e6ab61e01f879397576e3

  • Size

    276KB

  • Sample

    220714-aztp8ahaf5

  • MD5

    a3429a9d44f94019d94339631a2a2c39

  • SHA1

    3b63dbf0a6f044c1cb728b79c15c784d6a107f09

  • SHA256

    492c4e86ab5eed732e29f109cb48dbef64ca7471cd2e6ab61e01f879397576e3

  • SHA512

    d1ae73c9a78cb569ec6ab76ae8b6f941aa441dbbe9d821c690ea3e369d093c2655aa78a9cdd736df9b5ead8f1c962f64d4cad5ffccfabffa3eac6d7e3f04af7a

Score
10/10
darkcometguest16rattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-2TRH0QQ

Attributes
  • gencode

    fYebg7ya0k9F

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      492c4e86ab5eed732e29f109cb48dbef64ca7471cd2e6ab61e01f879397576e3

    • Size

      276KB

    • MD5

      a3429a9d44f94019d94339631a2a2c39

    • SHA1

      3b63dbf0a6f044c1cb728b79c15c784d6a107f09

    • SHA256

      492c4e86ab5eed732e29f109cb48dbef64ca7471cd2e6ab61e01f879397576e3

    • SHA512

      d1ae73c9a78cb569ec6ab76ae8b6f941aa441dbbe9d821c690ea3e369d093c2655aa78a9cdd736df9b5ead8f1c962f64d4cad5ffccfabffa3eac6d7e3f04af7a

    Score
    10/10
    darkcometguest16rattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks