Extracted

• • Target

    7cac7f217fcffa373f1e6c45ca09707cc2b3b965f56d9bb5d0c7039b70889a05N

  • Size

    520KB

  • MD5

    e5f0c29a42fb571a989a2e0dabafcd80

  • SHA1

    8b3c31a73acf6bd6029d4d25103f83c8dbc348d9

  • SHA256

    7cac7f217fcffa373f1e6c45ca09707cc2b3b965f56d9bb5d0c7039b70889a05

  • SHA512

    5f1f28046b5abcc03edee7087a95c909e94daa800b8cd1bbb6bbffded89c1bbcc520b87ad53a7526eb4b2179ccc824ca24bbf098cd2f4635cc1a177c6ce201b5

  • SSDEEP

    6144:f9GGo2CwtGg6eeihEfph2CMvvqqSaYwpncOeC66AOa0aFtVEQfTo1ozVqMbH:f9fC3hh29Ya77A90aFtDfT5IMbH

  Score

  10^/10

  darkcometprivateeyediscoverypersistencerattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2