Overview

overview

10

Static

static

805692820c...db.exe

windows7-x64

10

805692820c...db.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    805692820c9f6b42b821b411de1749e1142f8ff2bbc71bf9c56b0c0e0dc3a9db

  • Size

    552KB

  • Sample

    221201-p413esdd5t

  • MD5

    929ed3d7da48e80a50189d0dff1c58ea

  • SHA1

    50c6aaae6e2336be9d8479e460c9c0d01ce90f49

  • SHA256

    805692820c9f6b42b821b411de1749e1142f8ff2bbc71bf9c56b0c0e0dc3a9db

  • SHA512

    514674074d4115a2611ead904c293f830242f5b252e0858ea9b69fc332e659556ccc5e6100b51af46777751a7820a5ce61f278ad6c1c774b31ff90982cc0b79d

  • SSDEEP

    12288:vbdzi6VM9YIpgLXNn/kOdAPWbA+2jg/YXn7rGNrkty0fkhAkmL:viUt8z2j2j+YXnErmyFAB

Score
10/10
darkcometrattrojanupx

Malware Config

Targets

    • Target

      805692820c9f6b42b821b411de1749e1142f8ff2bbc71bf9c56b0c0e0dc3a9db

    • Size

      552KB

    • MD5

      929ed3d7da48e80a50189d0dff1c58ea

    • SHA1

      50c6aaae6e2336be9d8479e460c9c0d01ce90f49

    • SHA256

      805692820c9f6b42b821b411de1749e1142f8ff2bbc71bf9c56b0c0e0dc3a9db

    • SHA512

      514674074d4115a2611ead904c293f830242f5b252e0858ea9b69fc332e659556ccc5e6100b51af46777751a7820a5ce61f278ad6c1c774b31ff90982cc0b79d

    • SSDEEP

      12288:vbdzi6VM9YIpgLXNn/kOdAPWbA+2jg/YXn7rGNrkty0fkhAkmL:viUt8z2j2j+YXnErmyFAB

    Score
    10/10
    darkcometrattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks