Overview

overview

10

Static

static

3

dbb565ece6...4N.exe

windows7-x64

10

dbb565ece6...4N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbb565ece62394c8c288037a7d1e214ff83c2f55103e9ddc2b4f79c7e0264964N

  • Size

    701KB

  • Sample

    241023-fq6lbascrh

  • MD5

    43a4fee32be19010f5362c6392012ff0

  • SHA1

    032800acaef48eb6dad5dbd7daf47f15186f0bf2

  • SHA256

    dbb565ece62394c8c288037a7d1e214ff83c2f55103e9ddc2b4f79c7e0264964

  • SHA512

    26548205df7c038d648c2ff639fa25cd762af3187c46afe7ff5aedd24d129c975be66a7250e4dde85a131c80806b02c1ed37fd05faba3e12180cacebff73116c

  • SSDEEP

    12288:U3hC5WptkkSS7lvfKjSRimWEms0gZcOo8lzeKHk41JI4KuMlLoce:bApGkSKhKOR3U0Zch8lzBE41JI4DMR

Score
10/10
darkcometdiscoverypersistencerattrojan

Malware Config

Targets

    • Target

      dbb565ece62394c8c288037a7d1e214ff83c2f55103e9ddc2b4f79c7e0264964N

    • Size

      701KB

    • MD5

      43a4fee32be19010f5362c6392012ff0

    • SHA1

      032800acaef48eb6dad5dbd7daf47f15186f0bf2

    • SHA256

      dbb565ece62394c8c288037a7d1e214ff83c2f55103e9ddc2b4f79c7e0264964

    • SHA512

      26548205df7c038d648c2ff639fa25cd762af3187c46afe7ff5aedd24d129c975be66a7250e4dde85a131c80806b02c1ed37fd05faba3e12180cacebff73116c

    • SSDEEP

      12288:U3hC5WptkkSS7lvfKjSRimWEms0gZcOo8lzeKHk41JI4KuMlLoce:bApGkSKhKOR3U0Zch8lzBE41JI4DMR

    Score
    10/10
    darkcometdiscoverypersistencerattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks