Overview

overview

10

Static

static

3

c4152f0e4d...31.exe

windows7-x64

10

c4152f0e4d...31.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c4152f0e4d245d616b6ee3c8a21a3e3c94926a5083cedf607df014aca2f6a631

  • Size

    1.7MB

  • Sample

    250114-j7l5savkgr

  • MD5

    0acfcded8b4ac12fe117a597f4f43724

  • SHA1

    8fa8c7a9b601cf76a9ea487d4d94784d1914cbb6

  • SHA256

    c4152f0e4d245d616b6ee3c8a21a3e3c94926a5083cedf607df014aca2f6a631

  • SHA512

    20188ad19f995c350a5d22f92500db127616aad23d3cec5fb755ee8180a8518bb0d6ac29a39eef291212c36289dc16866a131655c16a8549eab76114bbe088c8

  • SSDEEP

    24576:eP3k/Aj7n2VrfVd1XjxcMtXvUTNv8maGLM3TbNwBTS5susMj:ec/ACdvzDv+V5rLM3TpwBR3M

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      c4152f0e4d245d616b6ee3c8a21a3e3c94926a5083cedf607df014aca2f6a631

    • Size

      1.7MB

    • MD5

      0acfcded8b4ac12fe117a597f4f43724

    • SHA1

      8fa8c7a9b601cf76a9ea487d4d94784d1914cbb6

    • SHA256

      c4152f0e4d245d616b6ee3c8a21a3e3c94926a5083cedf607df014aca2f6a631

    • SHA512

      20188ad19f995c350a5d22f92500db127616aad23d3cec5fb755ee8180a8518bb0d6ac29a39eef291212c36289dc16866a131655c16a8549eab76114bbe088c8

    • SSDEEP

      24576:eP3k/Aj7n2VrfVd1XjxcMtXvUTNv8maGLM3TbNwBTS5susMj:ec/ACdvzDv+V5rLM3TpwBR3M

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks