General

  • Target

    0050c4d18b9514c06f2968c887e094b42000792670f6fb8d8ed90a94bde5f138N.exe

  • Size

    704KB

  • Sample

    241205-kcsvhswnhz

  • MD5

    ee74ff8186fff2b2dc0314f897d52fb0

  • SHA1

    8f97746fe83cba19201c34356dc3030ecd089aa8

  • SHA256

    0050c4d18b9514c06f2968c887e094b42000792670f6fb8d8ed90a94bde5f138

  • SHA512

    8c33805adb53a681b120e83416b2e8b0d2c74481b492d19334d62f1fc526e6c18a29abd9c7a1d1d9c57565e9948d542fe6a13be0bd518b0ccd293e2876b4ced4

  • SSDEEP

    12288:27l0HhGOehowqTR+8re/7oxYOvOK+e0cfIlhKGHqsW/QUWs:ul0HOho5TM0SOYQsfKiUf

Malware Config

Targets

    • Target

      0050c4d18b9514c06f2968c887e094b42000792670f6fb8d8ed90a94bde5f138N.exe

    • Size

      704KB

    • MD5

      ee74ff8186fff2b2dc0314f897d52fb0

    • SHA1

      8f97746fe83cba19201c34356dc3030ecd089aa8

    • SHA256

      0050c4d18b9514c06f2968c887e094b42000792670f6fb8d8ed90a94bde5f138

    • SHA512

      8c33805adb53a681b120e83416b2e8b0d2c74481b492d19334d62f1fc526e6c18a29abd9c7a1d1d9c57565e9948d542fe6a13be0bd518b0ccd293e2876b4ced4

    • SSDEEP

      12288:27l0HhGOehowqTR+8re/7oxYOvOK+e0cfIlhKGHqsW/QUWs:ul0HOho5TM0SOYQsfKiUf

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks