Overview

overview

10

Static

static

10

42453ee5b1...4b.exe

windows7-x64

10

42453ee5b1...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42453ee5b1252b2629bf462a90a9cb6a22e878b857efe55b652e58dccfc4ba4b

  • Size

    732KB

  • Sample

    241005-zjkj2ssbpl

  • MD5

    15443433639e02f8779d22c3eabaee9f

  • SHA1

    e2e2caebf1226cb65a76498eb93d6c44e71e20fb

  • SHA256

    42453ee5b1252b2629bf462a90a9cb6a22e878b857efe55b652e58dccfc4ba4b

  • SHA512

    0ccd1f5fe0a95bf7ac24b041a4bf4561cb1ee82e7c3d4556a3aaa7687bcd3ec3a8ed03195775b7b764d42af785977e168964946683faa2e27fc13d877dae56dd

  • SSDEEP

    12288:mpwABK90BOe/x9lPAYvxPQVjdsAY2XjWlnlpTMMXG91uhKIXn/:gwAcu99lPzvxP+Bsz2XjWTRMQckkIXn

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      42453ee5b1252b2629bf462a90a9cb6a22e878b857efe55b652e58dccfc4ba4b

    • Size

      732KB

    • MD5

      15443433639e02f8779d22c3eabaee9f

    • SHA1

      e2e2caebf1226cb65a76498eb93d6c44e71e20fb

    • SHA256

      42453ee5b1252b2629bf462a90a9cb6a22e878b857efe55b652e58dccfc4ba4b

    • SHA512

      0ccd1f5fe0a95bf7ac24b041a4bf4561cb1ee82e7c3d4556a3aaa7687bcd3ec3a8ed03195775b7b764d42af785977e168964946683faa2e27fc13d877dae56dd

    • SSDEEP

      12288:mpwABK90BOe/x9lPAYvxPQVjdsAY2XjWlnlpTMMXG91uhKIXn/:gwAcu99lPzvxP+Bsz2XjWTRMQckkIXn

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks