General

  • Target

    ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8.exe

  • Size

    372KB

  • Sample

    250217-beg2csvlel

  • MD5

    d1f5070ca9694e8a8a191e20716f2866

  • SHA1

    2accfe7f6499a5277a6da62ff0eacbffb1d6eaab

  • SHA256

    ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8

  • SHA512

    c878d2ffb11e5c121429fedde8b34fb6d6b5e5507c5557ec749ed887fc89de3c71c621286ff32557955f2acda063ac8d37ca718ba33b386e22beb100dddc52a4

  • SSDEEP

    6144:PKpc81qt4hyEQjVVebk9NGnwZsr3LL8Qetk7sTVHqC/HoC/XPPf9GSfY/a:PKpV1qt4/QegGdsU4RKCPP/v4SgS

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Targets

    • Target

      ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8.exe

    • Size

      372KB

    • MD5

      d1f5070ca9694e8a8a191e20716f2866

    • SHA1

      2accfe7f6499a5277a6da62ff0eacbffb1d6eaab

    • SHA256

      ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8

    • SHA512

      c878d2ffb11e5c121429fedde8b34fb6d6b5e5507c5557ec749ed887fc89de3c71c621286ff32557955f2acda063ac8d37ca718ba33b386e22beb100dddc52a4

    • SSDEEP

      6144:PKpc81qt4hyEQjVVebk9NGnwZsr3LL8Qetk7sTVHqC/HoC/XPPf9GSfY/a:PKpV1qt4/QegGdsU4RKCPP/v4SgS

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Downloads MZ/PE file

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks