Overview

overview

10

Static

static

10

312313.exe

windows7-x64

10

312313.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    312313.exe

  • Size

    658KB

  • Sample

    241005-rt82dszbrf

  • MD5

    0263bba809f042f9ea8880ba2f3e98af

  • SHA1

    8666ec5ee0110a0d267c9161a00983d5ac7230ad

  • SHA256

    23ce473c58618257a7b4a55e507dfda62bc0a822e8f570a159d632485468fab3

  • SHA512

    2513dbd4b8c89dc201c8f5ca6436d6c930e511e51221389cefb746101f6bdb8ad235660b0b29ee4a5020714667c1e938175cefc54323c443fd5447a977fc57fe

  • SSDEEP

    12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hc:GZ1xuVVjfFoynPaVBUR8f+kN10EBm

Score
10/10
darkcometsazandiscoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Sazan

C2

txx8luo.localto.net:3989

Mutex

DC_MUTEX-PKJY74V

Attributes
  • gencode

    6dSo4uVfX4sJ

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      312313.exe

    • Size

      658KB

    • MD5

      0263bba809f042f9ea8880ba2f3e98af

    • SHA1

      8666ec5ee0110a0d267c9161a00983d5ac7230ad

    • SHA256

      23ce473c58618257a7b4a55e507dfda62bc0a822e8f570a159d632485468fab3

    • SHA512

      2513dbd4b8c89dc201c8f5ca6436d6c930e511e51221389cefb746101f6bdb8ad235660b0b29ee4a5020714667c1e938175cefc54323c443fd5447a977fc57fe

    • SSDEEP

      12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hc:GZ1xuVVjfFoynPaVBUR8f+kN10EBm

    Score
    10/10
    darkcometsazandiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks