Extracted

• • Target

    1348493b6f64887733493d5410611dc0e30a21bb5b0ad75550614b285d8419cfN.exe

  • Size

    4.5MB

  • MD5

    42915e4c23133dad9b7dfe6e26e59e00

  • SHA1

    6f5166b6348536f21e433d4c13fce83d5641de16

  • SHA256

    1348493b6f64887733493d5410611dc0e30a21bb5b0ad75550614b285d8419cf

  • SHA512

    e5d01879e5713d1a7b076fbb53290a831f7b159b7f418094717babc1552859d947eb55bcc533f4435cac52c29d21809ca7ceef49c199ce36d8525beb1a65c6ef

  • SSDEEP

    49152:VNkIeCY8EHOEoYzTny4X6gO0DA4HlEzD4ft:d4ft

  Score

  10^/10

  darkcometcrypter_t411discoveryrattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2