General

  • Target

    cdb36b22cd10e83db9ede69a1a1310f7c8f47317a618f358632983984e9fa1ebN.exe

  • Size

    372KB

  • Sample

    250216-hf8zssxkfr

  • MD5

    e7dc4c1061bb28708a000dbbaa0c1e70

  • SHA1

    d0517bf0890ffb7c428c299f30044cd8ebe93b4f

  • SHA256

    cdb36b22cd10e83db9ede69a1a1310f7c8f47317a618f358632983984e9fa1eb

  • SHA512

    fe8ba980e9908ac895584e23a9349690b1ff09ebe747d597d1f6a1738b401156b822d9266e537a31fb9e9c710980b0c2fc8d9289cc1e75a7bd1fb36d9f227264

  • SSDEEP

    6144:PKpc81qt4hyEQjVVebk9NGnwZsr3LL8Qetk7sTVHqC/HoC/XPPf9GSfY/:PKpV1qt4/QegGdsU4RKCPP/v4Sg

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Targets

    • Target

      cdb36b22cd10e83db9ede69a1a1310f7c8f47317a618f358632983984e9fa1ebN.exe

    • Size

      372KB

    • MD5

      e7dc4c1061bb28708a000dbbaa0c1e70

    • SHA1

      d0517bf0890ffb7c428c299f30044cd8ebe93b4f

    • SHA256

      cdb36b22cd10e83db9ede69a1a1310f7c8f47317a618f358632983984e9fa1eb

    • SHA512

      fe8ba980e9908ac895584e23a9349690b1ff09ebe747d597d1f6a1738b401156b822d9266e537a31fb9e9c710980b0c2fc8d9289cc1e75a7bd1fb36d9f227264

    • SSDEEP

      6144:PKpc81qt4hyEQjVVebk9NGnwZsr3LL8Qetk7sTVHqC/HoC/XPPf9GSfY/:PKpV1qt4/QegGdsU4RKCPP/v4Sg

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Downloads MZ/PE file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks