Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
-
submitted
17/02/2025, 01:03
General
-
Target
ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8.exe
-
Size
372KB
-
MD5
d1f5070ca9694e8a8a191e20716f2866
-
SHA1
2accfe7f6499a5277a6da62ff0eacbffb1d6eaab
-
SHA256
ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8
-
SHA512
c878d2ffb11e5c121429fedde8b34fb6d6b5e5507c5557ec749ed887fc89de3c71c621286ff32557955f2acda063ac8d37ca718ba33b386e22beb100dddc52a4
-
SSDEEP
6144:PKpc81qt4hyEQjVVebk9NGnwZsr3LL8Qetk7sTVHqC/HoC/XPPf9GSfY/a:PKpV1qt4/QegGdsU4RKCPP/v4SgS
Malware Config
Extracted
darkcomet
- gencode
-
install
false
-
offline_keylogger
false
-
persistence
false
Signatures
-
Darkcomet
DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
-
Darkcomet family
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8.exe"C:\Users\Admin\AppData\Local\Temp\ec004ceff1ae904c0857c15a7c444d9e3843dc771035efa052e7b5de18a765e8.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
732KB
-
Filesize
732KB