Overview

overview

10

Static

static

10

Bloxstrap v281.exe

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Bloxstrap v281.exe

  • Size

    11.9MB

  • Sample

    241123-x75h1synbr

  • MD5

    0be784b86944b7a9bf441f7a162c5063

  • SHA1

    c9c4b60ceecbecd97ccfbb32a5ace6792b13b87e

  • SHA256

    554ba8585577dce1573b9b1a43607fed63d70f8cd38e9ab7bf7b8df219453ad1

  • SHA512

    f4381fc9164629e93c0e5f459b99831c6b1825640104081a0370136e3d539fbc9bedab89b459b4583aec75ed5352abafbd05fbcdfc8d64819b8f9e2abe4b2086

  • SSDEEP

    98304:o1qZ+pv3Tscod5DFasb/r5vGWD3EOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTlGK:o1qZ+pLscVsb/r5vGlObAbN0t

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

saw-shirts.gl.at.ply.gg:4164

Mutex

DC_MUTEX-F54S21D

Attributes
  • InstallPath

    Bloxstrap.exe

  • gencode

    3zEvf95rCogr

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Targets

    • Target

      Bloxstrap v281.exe

    • Size

      11.9MB

    • MD5

      0be784b86944b7a9bf441f7a162c5063

    • SHA1

      c9c4b60ceecbecd97ccfbb32a5ace6792b13b87e

    • SHA256

      554ba8585577dce1573b9b1a43607fed63d70f8cd38e9ab7bf7b8df219453ad1

    • SHA512

      f4381fc9164629e93c0e5f459b99831c6b1825640104081a0370136e3d539fbc9bedab89b459b4583aec75ed5352abafbd05fbcdfc8d64819b8f9e2abe4b2086

    • SSDEEP

      98304:o1qZ+pv3Tscod5DFasb/r5vGWD3EOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTlGK:o1qZ+pLscVsb/r5vGlObAbN0t

    Score
    10/10
    darkcometguest16discoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks