darkcomet | e4008de92b040d55c461507e9566796b88d609ef47a2725841ed15236ec1b430 | Triage

Submit
Reports

Overview

overview

Static

static

5

e4008de92b...0N.exe

windows7-x64

e4008de92b...0N.exe

windows10-2004-x64

Sharing

General

Target

e4008de92b040d55c461507e9566796b88d609ef47a2725841ed15236ec1b430N.exe
Size

343KB
Sample

241207-xvz3rstpdp
MD5

c9532fca51c429d6500cefb2e0c4dc80
SHA1

dec0a05d63dc16f1af68b9e4f881287556ca298a
SHA256

e4008de92b040d55c461507e9566796b88d609ef47a2725841ed15236ec1b430
SHA512

3b13e833e1fcbd7c215e2f1534f53a093f286ec3f895d4c5ea4c114883d55376f7be4b8ec7970b799f35db15b0e3cf67c2872037a03c0d278f7d95d70621ed9e
SSDEEP

6144:Z625dSJNivaGhyi6JCTYBPCghUTa4funeD5InWWLQZ4UHOsLLrMdWnpQZh9h4c:97SXGhyiICTK7qHueinWWLTfMMd0QZhb

Score

10^/10

darkcomet discovery rat trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

e4008de92b040d55c461507e9566796b88d609ef47a2725841ed15236ec1b430N.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan upx

windows7-x64

4 signatures

120 seconds

Behavioral task

behavioral2

Sample

e4008de92b040d55c461507e9566796b88d609ef47a2725841ed15236ec1b430N.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan upx

windows10-2004-x64

4 signatures

120 seconds

Malware Config

Targets

- Target
  
  e4008de92b040d55c461507e9566796b88d609ef47a2725841ed15236ec1b430N.exe
- Size
  
  343KB
- MD5
  
  c9532fca51c429d6500cefb2e0c4dc80
- SHA1
  
  dec0a05d63dc16f1af68b9e4f881287556ca298a
- SHA256
  
  e4008de92b040d55c461507e9566796b88d609ef47a2725841ed15236ec1b430
- SHA512
  
  3b13e833e1fcbd7c215e2f1534f53a093f286ec3f895d4c5ea4c114883d55376f7be4b8ec7970b799f35db15b0e3cf67c2872037a03c0d278f7d95d70621ed9e
- SSDEEP
  
  6144:Z625dSJNivaGhyi6JCTYBPCghUTa4funeD5InWWLQZ4UHOsLLrMdWnpQZh9h4c:97SXGhyiICTK7qHueinWWLTfMMd0QZhb
Score

10^/10

darkcomet discovery rat trojan upx
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojanupx

behavioral2

darkcometdiscoveryrattrojanupx

© 2018-2024

Terms | Privacy