Extracted

• • Target

    b41b5ff0e615b7a551ed96226e1e159353567cc8f6a3aa4afe2b0df193b2d716

  • Size

    1014KB

  • MD5

    fc36609a54c8f09988e46d3f14cdbe8e

  • SHA1

    59668fde8e4303bef1000bc6a2d179d6001c1bf4

  • SHA256

    b41b5ff0e615b7a551ed96226e1e159353567cc8f6a3aa4afe2b0df193b2d716

  • SHA512

    34de0feb1a2e0a4fd538d6c8083340998230e748fd8a3d12bf51751eff62af1ef3044e7e663760cb17bad3e548a45d75e8d9f1d6803c7a31246157423dae6d1c

  • SSDEEP

    12288:uXhcWNAzVJmM55U4j1DIuddcQsfXXKktxADIAP+RNJCH5fZlP:iBNArmMPU4jqudBcXHtxyIpB4TP

  Score

  10^/10

  darkcometcsgorattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Executes dropped EXE

  • Drops startup file

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2