Extracted

• • Target

    30ef3e22505c004c19752a055ca1368ba6347d5aadb041ae20d9b8d81bf9dde4N.exe

  • Size

    520KB

  • MD5

    12d6c5408a59cb4744fea81bc2cea430

  • SHA1

    23327837d91554876796a0bfff6fbfb873d50ed4

  • SHA256

    30ef3e22505c004c19752a055ca1368ba6347d5aadb041ae20d9b8d81bf9dde4

  • SHA512

    b8829f28ce992a530e4a7973735cae17b2382b12833e10352d395bc990d4eb33b5056ca9c14e2cbabd3571a254137d7263d71268b070ea6922a66cfbf3b75138

  • SSDEEP

    6144:f9GGo2CwtGg6eeihEfph2CMvvqqSaYwpncOeC66AOa0aFtVEQfTo1ozVqMbO:f9fC3hh29Ya77A90aFtDfT5IMbO

  Score

  10^/10

  darkcometprivateeyediscoverypersistencerattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2