Overview

overview

10

Static

static

8

b19d388e4f...d3.exe

windows7-x64

10

b19d388e4f...d3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b19d388e4f940668d956daa8216eac5cac9abf12b4436dac3e5a75b6851bf9d3

  • Size

    234KB

  • Sample

    221130-25shwsgf4t

  • MD5

    43c4dad983139deeca98c778e585f8c3

  • SHA1

    19907d30db34c7d65f77ba9020574293ded9d629

  • SHA256

    b19d388e4f940668d956daa8216eac5cac9abf12b4436dac3e5a75b6851bf9d3

  • SHA512

    cf901105d8067f58be4410c9dee6e913bdca30bf67603a4f9f0c52285b3e8e79e98d2c0821f2da17fe93666a88ef09c3470e9a1e2bbcbfd15f73f7d895b53ad3

  • SSDEEP

    6144:mFhji6OcPBB4vxiGHVnxq4s7+ufnyEwD62h1T50/qy8yEwoS:8fdgvxizp7+uz2DT50Cy8woS

Score
10/10
darkcometrattrojanupx

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

Targets

    • Target

      b19d388e4f940668d956daa8216eac5cac9abf12b4436dac3e5a75b6851bf9d3

    • Size

      234KB

    • MD5

      43c4dad983139deeca98c778e585f8c3

    • SHA1

      19907d30db34c7d65f77ba9020574293ded9d629

    • SHA256

      b19d388e4f940668d956daa8216eac5cac9abf12b4436dac3e5a75b6851bf9d3

    • SHA512

      cf901105d8067f58be4410c9dee6e913bdca30bf67603a4f9f0c52285b3e8e79e98d2c0821f2da17fe93666a88ef09c3470e9a1e2bbcbfd15f73f7d895b53ad3

    • SSDEEP

      6144:mFhji6OcPBB4vxiGHVnxq4s7+ufnyEwD62h1T50/qy8yEwoS:8fdgvxizp7+uz2DT50Cy8woS

    Score
    10/10
    darkcometrattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks