Extracted

• • Target

    1baca5dd089828dea0effef4c2302da8b715f22b788e0539837612b17624d4e4

  • Size

    1.8MB

  • MD5

    0b53da3572e97c021342ce254ba0aeb8

  • SHA1

    bc4f7a2a592afc3c998ee67d50c211c78479be5b

  • SHA256

    1baca5dd089828dea0effef4c2302da8b715f22b788e0539837612b17624d4e4

  • SHA512

    d7e2f5e7af0b87adef0f71a1c0e55c7014c01a672e2d0250d050d6a15db34954bf93096e10d44458cc2803c73e9792c0dc10d2d321dbeaec828dde458922f58e

  • SSDEEP

    49152:LJZoQrbTFZY1iab2DZq1XrSCuXsgR+PS4+F7xZk:LtrbTA1nMZqNTuXtKExZk

  Score

  10^/10

  darkcometautopersistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2