Resubmissions

06-07-2023 06:59

230706-hr9qgahc95 10

General

  • Target

    C0met.zip

  • Size

    15.7MB

  • MD5

    dd3aa205a2c12cb081943e9bb6acc047

  • SHA1

    a61dacfe81fb6445744220137e0ed8113bf40fef

  • SHA256

    0f49d4879b83235428a204edb905ca7e822ce4374c90c8321951a85193e0837b

  • SHA512

    e843484b232803af924f8acd07e6310d80d296eceb2236f6a9a692dd225ffbb7c2d0f0dcfa7975f399e69da50a3c79dd087abe2e63d94d276db520efa42f2efc

  • SSDEEP

    393216:Ajotz987bHCisCq9dP++jCEpUZpuQ2GHQZfl1ZSxj8sL2yEAidp:AknMq9dPJOEpgtHGDsd7yyEj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • C0met.zip
    .zip

    Password: 1515

  • Comet Executor.rar
    .rar

    Password: 1515

  • Comet Executor/Comet.exe
    .exe windows x86

    Password: 1515

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Comet Executor/autoexec.lnk
    .lnk
  • Comet Executor/bin/CometAuth.dll
    .dll windows x86

    Password: 1515

    776bfb700b592eb65047ce4c67f7c7bd


    Headers

    Imports

    Exports

    Sections

  • Comet Executor/bin/Monaco/index.html
    .html .js
  • Comet Executor/bin/Monaco/index.html.bak
    .html .js
  • Comet Executor/bin/Monaco/tabs/untitled
  • Comet Executor/bin/Monaco/vs/base/worker/workerMain.js
    .js
  • Comet Executor/bin/Monaco/vs/basic-languages/bat/bat.js
  • Comet Executor/bin/Monaco/vs/basic-languages/coffee/coffee.js
  • Comet Executor/bin/Monaco/vs/basic-languages/cpp/cpp.js
  • Comet Executor/bin/Monaco/vs/basic-languages/csharp/csharp.js
  • Comet Executor/bin/Monaco/vs/basic-languages/csp/csp.js
  • Comet Executor/bin/Monaco/vs/basic-languages/css/css.js
  • Comet Executor/bin/Monaco/vs/basic-languages/dockerfile/dockerfile.js
  • Comet Executor/bin/Monaco/vs/basic-languages/fsharp/fsharp.js
  • Comet Executor/bin/Monaco/vs/basic-languages/go/go.js
  • Comet Executor/bin/Monaco/vs/basic-languages/handlebars/handlebars.js
    .js
  • Comet Executor/bin/Monaco/vs/basic-languages/html/html.js
    .js
  • Comet Executor/bin/Monaco/vs/basic-languages/ini/ini.js
  • Comet Executor/bin/Monaco/vs/basic-languages/java/java.js
  • Comet Executor/bin/Monaco/vs/basic-languages/less/less.js
  • Comet Executor/bin/Monaco/vs/basic-languages/lua/lua.js
  • Comet Executor/bin/Monaco/vs/basic-languages/markdown/markdown.js
    .js
  • Comet Executor/bin/Monaco/vs/basic-languages/msdax/msdax.js
  • Comet Executor/bin/Monaco/vs/basic-languages/mysql/mysql.js
  • Comet Executor/bin/Monaco/vs/basic-languages/objective-c/objective-c.js
  • Comet Executor/bin/Monaco/vs/basic-languages/pgsql/pgsql.js
  • Comet Executor/bin/Monaco/vs/basic-languages/php/php.js
  • Comet Executor/bin/Monaco/vs/basic-languages/postiats/postiats.js
  • Comet Executor/bin/Monaco/vs/basic-languages/powershell/powershell.js
  • Comet Executor/bin/Monaco/vs/basic-languages/pug/pug.js
  • Comet Executor/bin/Monaco/vs/basic-languages/python/python.js
  • Comet Executor/bin/Monaco/vs/basic-languages/r/r.js
  • Comet Executor/bin/Monaco/vs/basic-languages/razor/razor.js
    .js
  • Comet Executor/bin/Monaco/vs/basic-languages/redis/redis.js
  • Comet Executor/bin/Monaco/vs/basic-languages/redshift/redshift.js
  • Comet Executor/bin/Monaco/vs/basic-languages/ruby/ruby.js
  • Comet Executor/bin/Monaco/vs/basic-languages/rust/rust.js
  • Comet Executor/bin/Monaco/vs/basic-languages/sb/sb.js
  • Comet Executor/bin/Monaco/vs/basic-languages/scss/scss.js
  • Comet Executor/bin/Monaco/vs/basic-languages/solidity/solidity.js
  • Comet Executor/bin/Monaco/vs/basic-languages/sql/sql.js
  • Comet Executor/bin/Monaco/vs/basic-languages/st/st.js
  • Comet Executor/bin/Monaco/vs/basic-languages/swift/swift.js
  • Comet Executor/bin/Monaco/vs/basic-languages/vb/vb.js
  • Comet Executor/bin/Monaco/vs/basic-languages/xml/xml.js
  • Comet Executor/bin/Monaco/vs/basic-languages/yaml/yaml.js
  • Comet Executor/bin/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
  • Comet Executor/bin/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • Comet Executor/bin/Monaco/vs/editor/editor.main.css
  • Comet Executor/bin/Monaco/vs/editor/editor.main.js
    .js
  • Comet Executor/bin/Monaco/vs/editor/editor.main.nls.de.js
  • Comet Executor/bin/Monaco/vs/editor/editor.main.nls.es.js
  • Comet Executor/bin/Monaco/vs/editor/editor.main.nls.fr.js
  • Comet Executor/bin/Monaco/vs/editor/editor.main.nls.it.js
  • Comet Executor/bin/Monaco/vs/editor/editor.main.nls.ja.js
  • Comet Executor/bin/Monaco/vs/editor/editor.main.nls.js
  • Comet Executor/bin/Monaco/vs/editor/editor.main.nls.ko.js
  • Comet Executor/bin/Monaco/vs/editor/editor.main.nls.ru.js
  • Comet Executor/bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • Comet Executor/bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • Comet Executor/bin/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • Comet Executor/bin/Monaco/vs/language/css/cssMode.js
    .js
  • Comet Executor/bin/Monaco/vs/language/css/cssWorker.js
    .js
  • Comet Executor/bin/Monaco/vs/language/html/htmlMode.js
    .js
  • Comet Executor/bin/Monaco/vs/language/html/htmlWorker.js
    .js
  • Comet Executor/bin/Monaco/vs/language/json/jsonMode.js
    .js
  • Comet Executor/bin/Monaco/vs/language/json/jsonWorker.js
    .js
  • Comet Executor/bin/Monaco/vs/language/typescript/lib/typescriptServices.js
    .js
  • Comet Executor/bin/Monaco/vs/language/typescript/tsMode.js
    .js
  • Comet Executor/bin/Monaco/vs/language/typescript/tsWorker.js
    .js
  • Comet Executor/bin/Monaco/vs/loader.js
    .js
  • Comet Executor/bin/Ruyi.dll
    .dll windows x86

    Password: 1515

    8d5d2984e07c57cda0cd5720ad3d2aef


    Headers

    Imports

    Exports

    Sections

  • Comet Executor/bin/highlighter.xshd
    .xml
  • Comet Executor/bin/key.png
    .png
  • Comet Executor/bin/key.svg
  • Comet Executor/data/theme.comet
  • Comet Executor/runtimes/win-arm64/native/WebView2Loader.dll
  • Comet Executor/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows x64

    Password: 1515

    3fd78a8f50b85b627af2d0fc485b5e97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Comet Executor/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows x86

    Password: 1515

    a64b009ff2c9503726050a45e231f4c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Comet Executor/scripts/Aimbot 3.0.txt
    .js
  • Comet Executor/scripts/Aimbot.txt
    .js
  • Comet Executor/scripts/Alt+Print.txt
  • Comet Executor/scripts/ArsenalHitboxExtender.txt
  • Comet Executor/scripts/Blox Fruits.txt
  • Comet Executor/scripts/Boys And Girls Hangout Gun.txt
  • Comet Executor/scripts/CBROKillAll.txt
  • Comet Executor/scripts/CC Aimbot V2.txt
  • Comet Executor/scripts/CC Aimbot.txt
    .js
  • Comet Executor/scripts/CTRL+Del.txt
  • Comet Executor/scripts/Click TP Tool.txt
  • Comet Executor/scripts/CocoHub.txt
  • Comet Executor/scripts/Dark Hub.txt
  • Comet Executor/scripts/DexV1.txt
  • Comet Executor/scripts/DexV4.txt
  • Comet Executor/scripts/DivineSisters.txt
  • Comet Executor/scripts/EclipseMM2.txt
  • Comet Executor/scripts/FPSBoost.txt
  • Comet Executor/scripts/Flee The Facility.txt
  • Comet Executor/scripts/Infinite Yield.txt
  • Comet Executor/scripts/Invisible Fling.txt
  • Comet Executor/scripts/Jailbreak.txt
  • Comet Executor/scripts/Kraken Hub.txt
  • Comet Executor/scripts/LucidityMM2.txt
  • Comet Executor/scripts/MM2.txt
  • Comet Executor/scripts/MM2Autofarm.txt
  • Comet Executor/scripts/Mad City 2.txt
    .js
  • Comet Executor/scripts/Mad City GUI.txt
  • Comet Executor/scripts/Mad City.txt
  • Comet Executor/scripts/Mad Emotes.txt
  • Comet Executor/scripts/MheeHub.txt
  • Comet Executor/scripts/NoClipKeybind.txt
  • Comet Executor/scripts/OxieHub.txt
  • Comet Executor/scripts/Prisonware.txt
  • Comet Executor/scripts/Reviz Admin.txt
  • Comet Executor/scripts/SharkBite.txt
  • Comet Executor/scripts/UnitClassifiedGUI.txt
  • Comet Executor/scripts/ZyrexHub.txt
  • Comet Executor/scripts/oofNotoriety.txt
  • Comet Executor/workspace.lnk
    .lnk