Extracted

• • Target

    b9220af32c1f120b9ef5ff1ef00f215ad5548546f0ff883b7e184e3fa4dc3179

  • Size

    480KB

  • MD5

    3c7e0a467e0f70f2296f5f866adf5093

  • SHA1

    36531907e9a331226cd754dfd5fca79f5d3a0b25

  • SHA256

    b9220af32c1f120b9ef5ff1ef00f215ad5548546f0ff883b7e184e3fa4dc3179

  • SHA512

    9ebb345fefe55e59ef77749c9b79a9b3e2e7a63360fc5cc884b0e39434926e787052a8c8f3e1f4b7f3835d7db6112f4b487cf3a917329a1fa1d567a09b8429f4

  • SSDEEP

    12288:bgAEHD+lRMtTgVRXlzoFYaGOxutLyM4hYpPg3e:8j+4BgVRl0Fl6I

  Score

  10^/10

  darkcometguest16_minpersistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2