Extracted

• • Target

    yooooooooooooooooooooooooooo.exe

  • Size

    658KB

  • MD5

    16970261ab090fc0df7e9124f9758d5c

  • SHA1

    04316b859eaa6b0894c5eb749a618ddc86d31ea5

  • SHA256

    8ecb10af9238d2b7b2739d8294d2d817e1c90e801787b39c353f24e955d7889d

  • SHA512

    31096688a7b24636eb39d21660a40749d26783ed90c279647bbb29a04bc2548bda9fe08a6f9d2de9a41802db3c9f3693fb68c6ddeb8daa3bf8b0ceb52578ec4c

  • SSDEEP

    12288:y9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hV:eZ1xuVVjfFoynPaVBUR8f+kN10EBD

  Score

  10^/10

  darkcometguest16_mindiscoverypersistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Modifies WinLogon for persistence

    persistence

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1