Overview

overview

10

Static

static

Doge-Miner203.exe

windows7-x64

10

Doge-Miner203.exe

windows10-2004-x64

10

Resubmissions

27-01-2023 19:10

230127-xvglescg25 10

27-01-2023 17:57

230127-wjv41adg9z 10

27-01-2023 17:47

230127-wcvjwsdg7x 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Doge-Miner203.exe

  • Size

    6.1MB

  • Sample

    230127-wjv41adg9z

  • MD5

    d7e6fd264bc937e3646de58e551a29db

  • SHA1

    1db4664777b17e004f71cee4002f9ccc430413e4

  • SHA256

    463d5d683ca55e95f8701d36543d6208fae366e065bc71fe663351450a4f8c24

  • SHA512

    cc133bd0599c0a994c65c2ddc047dd7bec3d4032201feba63ac8f4a35582a31f2eed5d3bfe385fefda7e76d3e95415b1ccf1923a9b74a1792dc36c8f7caee837

  • SSDEEP

    98304:tGFp32YKbG4vUdQUbSZ/I2jeYXyxd4494Wc9f:tEMbqQ5Z/pjVifXuT

Score
10/10
darkcometpersistencerattrojanupx

Malware Config

Targets

    • Target

      Doge-Miner203.exe

    • Size

      6.1MB

    • MD5

      d7e6fd264bc937e3646de58e551a29db

    • SHA1

      1db4664777b17e004f71cee4002f9ccc430413e4

    • SHA256

      463d5d683ca55e95f8701d36543d6208fae366e065bc71fe663351450a4f8c24

    • SHA512

      cc133bd0599c0a994c65c2ddc047dd7bec3d4032201feba63ac8f4a35582a31f2eed5d3bfe385fefda7e76d3e95415b1ccf1923a9b74a1792dc36c8f7caee837

    • SSDEEP

      98304:tGFp32YKbG4vUdQUbSZ/I2jeYXyxd4494Wc9f:tEMbqQ5Z/pjVifXuT

    Score
    10/10
    persistencedarkcometrattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks