Extracted

• • Target

    45b413788443c5c29fa33b9f076f3a77f766e5c847bd8bae1b19730ee122ebdcN.exe

  • Size

    520KB

  • MD5

    c58745533bb498e3d4fed83625820cb0

  • SHA1

    a06472f971ff3dc5b7181c9ff084039cd83d76ec

  • SHA256

    45b413788443c5c29fa33b9f076f3a77f766e5c847bd8bae1b19730ee122ebdc

  • SHA512

    23d274ec8b2ba05e4c735a8638ad66f6d8726413f4f58fa1ac37782c7dca07ef69be2661be41868d8dc447366aacbb37d63ff71c54f7eae86a82c3339ea27f39

  • SSDEEP

    6144:f9GGo2CwtGg6eeihEfph2CMvvqqSaYwpncOeC66AOa0aFtVEQfTo1ozVqMb4:f9fC3hh29Ya77A90aFtDfT5IMb4

  Score

  10^/10

  darkcometprivateeyediscoverypersistencerattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2