Extracted

• • Target

    d0aaeac6fad969bdbe23ad92492ff0691a2e99722d74409adf7dd0c95eedecd8N

  • Size

    520KB

  • MD5

    da0a16ef15c55b1812b1a98e938a2320

  • SHA1

    cf01718406a6207f7225f44902f063cc7f99ded9

  • SHA256

    d0aaeac6fad969bdbe23ad92492ff0691a2e99722d74409adf7dd0c95eedecd8

  • SHA512

    53832d9776a12ea1cd20428f7c274e47dffaa8996198056a3b079cdda93cb34a7f6b147d53423e773005c476537da1fbddabe4f943ab30e07c16812f7d714e5e

  • SSDEEP

    6144:f9GGo2CwtGg6eeihEfph2CMvvqqSaYwpncOeC66AOa0aFtVEQfTo1ozVqMbY:f9fC3hh29Ya77A90aFtDfT5IMbY

  Score

  10^/10

  darkcometprivateeyediscoverypersistencerattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2