Extracted

• • Target

    e183e9fadca4fb94ecca6406d94af72c20293eb3ede73ed1b9266403bef2e482

  • Size

    916KB

  • MD5

    02a93c181aa787c5b4dd74ac314938f6

  • SHA1

    03d9ce339c557636a74ceda3b9a30ceb36a119df

  • SHA256

    e183e9fadca4fb94ecca6406d94af72c20293eb3ede73ed1b9266403bef2e482

  • SHA512

    0aa5522749923910babf2125748ab1932c5528b9a61ec8182f396727b8a29f330f36683ee0ff3b2c87f9756dc4642d6eab9a43f2d9e0f672373f3dc2e6363f19

  • SSDEEP

    12288:Coro7edR+tBKnB9aji1Wnbl5FA9JUDgGfL29X5XK5czlcYY9t:Coro7edwtwnBgjiGxbk3G1t

  Score

  10^/10

  darkcometguest16evasionrattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Executes dropped EXE

  • Sets file to hidden

    Modifies file attributes to stop it showing in Explorer etc.

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2