Extracted

• • Target

    5cc7988d8c232b5cf79f18a102783dc0_exe32.exe

  • Size

    6.9MB

  • MD5

    5cc7988d8c232b5cf79f18a102783dc0

  • SHA1

    4885b54a9d4cb1ded609b2f08e7a04c93e515eba

  • SHA256

    34a7e2ae2fcc13123fc013b7848c4832879cc4095dd1a9abd4b51e7e4181d97c

  • SHA512

    667c13613502dcea3b1706b6cb06f5c91196bb830734bdce3f25628820e95f5424200dd47cf94938b6fca3c584b35ad27f391d7d23ac921ef388c60a692a7c65

  • SSDEEP

    6144:6t2Ic0GfHIUWA0rJ5b7gvq5eyzaM+zN00qFTaUfwUY2z9GAR2OWq7me:6t24G8fQtk+B00ODfXZGGWwme

  Score

  10^/10

  darkcometguest16rattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2