Overview

overview

10

Static

static

10

6126698305...9d.exe

windows7-x64

10

6126698305...9d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6126698305d4a23c68333e54bb162a9d

  • Size

    247KB

  • Sample

    231226-krcf3sdad4

  • MD5

    6126698305d4a23c68333e54bb162a9d

  • SHA1

    b9411d34a658297f4a00e085f1a91dc5178a982b

  • SHA256

    52c7f0ee51dafe2eac0077ec0e3010f496acc168b8c69edd005e770d101ad30a

  • SHA512

    b1b3abe1359f7a4cf782e515c11c34d79e16a7b730648f515cd9c55e8ee72015f38338f6823e79e4e3fd1607bfcfebc8b5b3018ebbe328f1dc2048900c47b81a

  • SSDEEP

    6144:cFRaI2EqBP/WsZL1PgLl4w0AidVym0EnarUBYVsl:8R72EqluswR45JTnaEY2

Score
10/10
darkcometrattrojanupx

Malware Config

Targets

    • Target

      6126698305d4a23c68333e54bb162a9d

    • Size

      247KB

    • MD5

      6126698305d4a23c68333e54bb162a9d

    • SHA1

      b9411d34a658297f4a00e085f1a91dc5178a982b

    • SHA256

      52c7f0ee51dafe2eac0077ec0e3010f496acc168b8c69edd005e770d101ad30a

    • SHA512

      b1b3abe1359f7a4cf782e515c11c34d79e16a7b730648f515cd9c55e8ee72015f38338f6823e79e4e3fd1607bfcfebc8b5b3018ebbe328f1dc2048900c47b81a

    • SSDEEP

      6144:cFRaI2EqBP/WsZL1PgLl4w0AidVym0EnarUBYVsl:8R72EqluswR45JTnaEY2

    Score
    10/10
    darkcometrattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks