Overview

overview

10

Static

static

3

0af608e911...ee.exe

windows7-x64

10

0af608e911...ee.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0af608e9116ca465022a75f3c04f00ee

  • Size

    1.6MB

  • Sample

    231224-wvbjqseedn

  • MD5

    0af608e9116ca465022a75f3c04f00ee

  • SHA1

    998f2d298569c5618466f792ed03f77fee22470f

  • SHA256

    63b44c6c032a64c55d978ff64a58b8529402b55f678109727702a91421e31d21

  • SHA512

    86594c204ad49b6ea961e1a9af64c9824b3031dfef5a31244d7b21c86f15731de37ce5c2ab3ca13e06dcbd324f951daf074e1d2bee725ee461641dd3e2f689b0

  • SSDEEP

    24576:eG5drt5hlq2r+kkNNVJGoBcf5FMt36c7nSgMit65Eq/318GpGTv/JZl6Ez:lDhlq22gFcOXit6SmjkF6

Score
10/10
darkcometrattrojan

Malware Config

Targets

    • Target

      0af608e9116ca465022a75f3c04f00ee

    • Size

      1.6MB

    • MD5

      0af608e9116ca465022a75f3c04f00ee

    • SHA1

      998f2d298569c5618466f792ed03f77fee22470f

    • SHA256

      63b44c6c032a64c55d978ff64a58b8529402b55f678109727702a91421e31d21

    • SHA512

      86594c204ad49b6ea961e1a9af64c9824b3031dfef5a31244d7b21c86f15731de37ce5c2ab3ca13e06dcbd324f951daf074e1d2bee725ee461641dd3e2f689b0

    • SSDEEP

      24576:eG5drt5hlq2r+kkNNVJGoBcf5FMt36c7nSgMit65Eq/318GpGTv/JZl6Ez:lDhlq22gFcOXit6SmjkF6

    Score
    10/10
    darkcometrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks