Extracted

• • Target

    8989d145a2b5057d5d75cf067af75ac4a20d989bd064c57c7bdae3365807f6c5

  • Size

    842KB

  • MD5

    903ea10ddeb5dec6a2293c3dfa5a0804

  • SHA1

    2343f04be76f32311bb95d0a9e552e50a733a74f

  • SHA256

    8989d145a2b5057d5d75cf067af75ac4a20d989bd064c57c7bdae3365807f6c5

  • SHA512

    773bc3767ed9e4090d49861fe9de8c1b11e34cf0f95bad944364034910d3aeded0e65f257d3ab3ad73b535d0c6643a5a056e4ba01f74730b01b28aeb12423bd5

  • SSDEEP

    24576:h04aY7IxRCHLZYQ4wFOLlOuP0KDOQJ97AWeduO6mMPrrL:h8cIHyLZClOXKKQJ9UWesBmQz

  Score

  10^/10

  darkcometarabpersistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2