Extracted

• • Target

    2df59759ffa11fc1ddb0da4c7a2e959bf478465885ebd3bf30e4465676ec13c5

  • Size

    520KB

  • MD5

    755bbf8807489fbac8d8438e55e26907

  • SHA1

    67b24ce8a8644a0524065032801a5a535f0a82a8

  • SHA256

    2df59759ffa11fc1ddb0da4c7a2e959bf478465885ebd3bf30e4465676ec13c5

  • SHA512

    4092637525939fdf5e8c4f567f5ea33f5104de3b7bec18a60ca0aad24513a7d27aa52bdebc64e9afd3aeff16ce94fa2ebc497ac4ac66442ba1b13538c0a213f8

  • SSDEEP

    6144:f9GGo2CwtGg6eeihEfph2CMvvqqSaYwpncOeC66AOa0aFtVEQfTo1ozVqMbb:f9fC3hh29Ya77A90aFtDfT5IMbb

  Score

  10^/10

  darkcometprivateeyediscoverypersistencerattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2