Extracted

• • Target

    c88ac47c919fccf20c62258cb2c0536e46a95fadc1317783a8acc26398f2db9d.exe

  • Size

    520KB

  • MD5

    c11cdd2f63aa1ab1b2614dea9a8598fc

  • SHA1

    d295e15983a547806c945148b9042d8c8f62ed39

  • SHA256

    c88ac47c919fccf20c62258cb2c0536e46a95fadc1317783a8acc26398f2db9d

  • SHA512

    e8c5015d0866805756540e03bf3bef3cd51d9364e48a52bfda3bbc5ad74e791d0437ac0f360b7f2ec44cc578a9214d14b135443a2e7caf715e99b9315cdf0951

  • SSDEEP

    6144:f9GGo2CwtGg6eeihEfph2CMvvqqSaYwpncOeC66AOa0aFtVEQfTo1ozVqMbh:f9fC3hh29Ya77A90aFtDfT5IMbh

  Score

  10^/10

  darkcometprivateeyediscoverypersistencerattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2