cc50f2aafb778c21b702c246ed480a14615208799113a29793962c3a8401beb7

Sharing

Copy URL Twitter E-mail

General

Target
comet_installer_latest.exe
Size 14.0MB
Sample260503-exmlcabv9t
SHA256 cc50f2aafb778c21b702c246ed480a14615208799113a29793962c3a8401beb7
MD5 968e0209a85a57c62a6b40be993036e6
SHA1 9afe2605ffc4623961dd8edd696f9e76afd16b30
SHA512 7d7775b398ec454f39758b9c432e3a49289e32613865847e27800e1c85ad6409e07cbfdbda82872fa7a59fe27a6883d7644e939843e2e97896621cfa753a833c
SSDEEP 393216:C6nU+lGLDdJuhXCf6PQJ2NFv8c3us6fgKf1jIwmqxfG8:CSU+o7mXCf6643us6f+0fG
TLSH
T16BE63315E540CBCFE5349AB112DA7B978F187C7BF1942C0BF08BA82149B5DB1DE19A23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  comet_installer_latest.exe
- Size 14.0MB
- SHA256 cc50f2aafb778c21b702c246ed480a14615208799113a29793962c3a8401beb7
- MD5 968e0209a85a57c62a6b40be993036e6
- SHA1 9afe2605ffc4623961dd8edd696f9e76afd16b30
- SHA512 7d7775b398ec454f39758b9c432e3a49289e32613865847e27800e1c85ad6409e07cbfdbda82872fa7a59fe27a6883d7644e939843e2e97896621cfa753a833c
- SSDEEP 393216:C6nU+lGLDdJuhXCf6PQJ2NFv8c3us6fgKf1jIwmqxfG8:CSU+o7mXCf6643us6f+0fG
- TLSH
  T16BE63315E540CBCFE5349AB112DA7B978F187C7BF1942C0BF08BA82149B5DB1DE19A23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral1 behavioral2
- Target
  data/flutter_assets/AssetManifest.bin
- Size 1KB
- SHA256 f5f212282b564bcb48dfad27444bb4ba1ff441a8f11b110de5d1846652273958
- MD5 ff160984c7870bacfacc60d5f04d32d6
- SHA1 3b28494639c27774ea57c0d675ef99c8ad6f8c5d
- SHA512 a6a83c627db4130f216d7a11345e89de695827946f5501ae5e11c516b63f1c71a1a2659982d287415c870a3e794712645b4c23210a96f742bd9df627721d0594
- TLSH
  T1DF31F705836032DF3C95B50235AB62A59D160F18AD54F7DF333DA849B1C285708FFA76
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  data/flutter_assets/AssetManifest.json
- Size 1KB
- SHA256 7d9ccb5fd3e4d960bd4ea55f40c2922023880d4cf7c32bc4abe9220e2ed68ebd
- MD5 d4e32a5468bd982cf633073536bdc4e1
- SHA1 d321e3baad1b1a65a1e2d517fe09364534a431ec
- SHA512 2e98d237445139f25543ad6b02f7bfb2b3651fda5a51e6030b9772fb3ffa5fc0462cb8a7ac36230dee73a49c381a630c11ff1d21c3509552e13ba450e1985b46
- TLSH
  T159318F00C24031DB3D9EB51A35ABA6998D451228AD94E7CE373D6D75B2C2C46013BAFE
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral5 behavioral6
- Target
  data/flutter_assets/FontManifest.json
- Size 500B
- SHA256 6cc627bfae80ea744ed3f0f5c264a38964f3566525726228fb16031312335410
- MD5 ec51b10df48d46f1500da548734a5a2e
- SHA1 d09eb307ffc962dc1a9a873b365a06a57db14a98
- SHA512 ecb5f4a3a4b30cd9d95030b1abc1af0b308701703f46a2d0feed8cb0d1c6bffd00310b1901173f9529507550f596a430100b4b67c49fa734cbbfae6ff5b1ca15
- TLSH
  T16CF0E90E484A455190DC9297F12EA0D2188C7B5A72C5E89BDE791E7063F223412717BB
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  data/flutter_assets/NOTICES.Z
- Size 85KB
- SHA256 c1e625f75d3ae0a8524ce677232d0142c7cbe523f46fc9dc10155786016d4798
- MD5 0911cba79b265a095731617f7486af63
- SHA1 ad845749b14881c3e164a1b1f89a15a66aec075b
- SHA512 82995d727fee291ed4587a75ee1ded0d533a6891cd14ce7bf5345a0c1ea447b6463d4b85d45d348d4db0b78eee298e37c40b84090afb2814ea39abd2611da00b
- SSDEEP 1536:Y5ikMYuugtOtNakUN6swf337xTOHvEkpp5PC/R2smYvdl92uZlpTD3cCALFysNVn:Y5ygtQkU+f3LxQ8kGh3yZLFysfKWKXiT
- TLSH
  T17A83F1BAF44394253E361B3C162A53B402C2F3B5E6D056DF915E8C32DD1F0B72A62667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  data/flutter_assets/NativeAssetsManifest.json
- Size 45B
- SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
- MD5 f3a664e105b4f792c6c7fe4e4d22c398
- SHA1 adee29ec4f2b3cb2ec37ec3368f37ff805695d36
- SHA512 b7df555970e20c6a50f650cd0df6ab782fba7004782b3f7921ccfd314db53bfb61523986628d2e05d085f4c2263dfcf54000ffdfc946b0158c5766fc6f1d0a86
- MD5 SHA1 SHA512
Score

3^/10
behavioral11 behavioral12
- Target
  data/flutter_assets/assets/certs/cacert.pem
- Size 222KB
- SHA256 64dfd5b1026700e0a0a324964749da9adc69ae5e51e899bf16ff47d6fd0e9a5e
- MD5 f586a2260272a64e67aef3526353dcd4
- SHA1 b4d7062cd418a22d31b8fd7a5ee1dc984750c51a
- SHA512 f9d72ca604f238f86d3b0233b4bd20cd728529f74eb190ad7a37f942b00b014a717fa771c848233365938ca090e7e855ac2c3abdd4a25e18ce16b99b65ef56c3
- SSDEEP 3072:yHetHRqCCZjlkKSNY5h61W2BzEY2S1S4dmGf3IcCJjEWh3c+dogltO/ZyOTi1Pjx:OqU9NgI6FdZL52dTOgwQh1hV1AP2u2Ft
- TLSH
  T1C124AEEACF953C4A28E3E094C9AB037ED919C3629DDAB0B31D593805D78972D61FD08D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral13 behavioral14
- Target
  data/flutter_assets/assets/fonts/FKGrotesk-Regular.ttf
- Size 177KB
- SHA256 febff90f328edfee81b410afeb30a4647c4dcee262d5fc6f9bc5a4b16d07b287
- MD5 c557ce743016cb63495363acaa6ece59
- SHA1 4d95df058364fefdf96dae8ac248bd87f1f14f29
- SHA512 68941e1708e03c3e49985c8a7a939efd91b1b19935354ae143c7b2a331e37235a0b417a2f5ff9b1e99fa2b8a67a8300a11d0799a99520808cdab927562a852a7
- SSDEEP 1536:9AZUVNNm+vWUFqpxBF3d+NCXF9/iDXIN5N4aNpPbG9wpfaMDxRG72A5TgMlqoaeb:9yV+vWUnCV9dyP2A5r4HLw+5jy
- TLSH
  T10A046C07F203AB0EDD290D380974D3EA77E5F8515B17C20B74593A8DD8C72A90EBA2D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral15 behavioral16
- Target
  data/flutter_assets/assets/fonts/FKGroteskNeue-Medium.ttf
- Size 193KB
- SHA256 ec9ca3ce004894970235306c5c715a0a8ba4d5e49d3ebd1bc60d5dbf74aa2972
- MD5 b636888eb3a838f424fac3acf326a261
- SHA1 50b7d731d5edfef3ede49ec198103f7f74ea2886
- SHA512 89a14f2b9d43ef2c8da967bdc999f8e4a8bb5149d116c58d81ddfb94ba9c3eb502ae73a3e5bc018cfdaf69f178bc8743e9466232c62ea1b747e6bd94032411cb
- SSDEEP 3072:pcA5j1rQi8KYkns3ghHBT8NhPcyA8QFehRuvK:L5BL89mr8n7A8oex
- TLSH
  T1DB146D07F682DB0EED2A2E354576D76B51F4F02A1F93028A7418669BECC73D04FAA5C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral17 behavioral18
- Target
  data/flutter_assets/assets/fonts/FKGroteskNeue-Regular.ttf
- Size 195KB
- SHA256 8ecdf9159eecdd0b185efcdcfa1642be7e631207b9c7181aa435c0e00967b077
- MD5 dab283b093dc521f4c46031787d45524
- SHA1 384b6ba7c4cdef8cd69be445bb6d6bca2d87bc8e
- SHA512 fc3ac2469072c769057b1a50c26692bbba8a7e4fbd40c849195eecb6e9b759121bd3563b002a5b010c7be8e71d69096005b706c643f9b36fb4e208c8feade7be
- SSDEEP 3072:sA5jb8qs7HnNTUsHOOKyG3VS2pXEFKplcvEa:N5/8dweKplE
- TLSH
  T197147C07F781D70EED2A2D74457AC72B61F4F02B2BA703867419666BDCCA2E04E791C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral19 behavioral20
- Target
  data/flutter_assets/assets/fonts/PPEditorialNew-Ultralight.ttf
- Size 89KB
- SHA256 b564eba9ea02a1b2ca76727803de45c56c0bee373d30d5058623eff432245c0d
- MD5 cf990ced775f80147a8a08b5caabebd4
- SHA1 bf294e8ab736ba6b7978bc8f869e3d7cd7bc1a46
- SHA512 515dbaad380f595fe51429cd96a1c79852bb243f05366816e1ee57144ce757c9eb26915e0699d4e17b464f84ef28446120f6887fef5d62443ee53acd0368957f
- SSDEEP 1536:BAA1sD0OSBzuVLaNVZqDLPTV2j/sdDnXJg1xX4HGDC57rZGY8Y+IbiE9vR8YPNfb:BT1sD0eL+P+5MY8iHy0Nj3
- TLSH
  T118936C0AF3A6D64EFE2E1F7C56F6876655ACF4065F7E914F60893A79C8C92804C022CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral21 behavioral22
- Target
  data/flutter_assets/assets/images/Comet_Icon.png
- Size 856B
- SHA256 ecc81d392ad64a9e0a85705b87ce330efccc42ce56f16da64e9874275592151a
- MD5 8187746e2072b4a94be1394e54d670f3
- SHA1 36ec157d99af0a64c4093b90d9c400b918646fb8
- SHA512 09d564a80ce141d962d93caa85a0a161f886a776ca1a0b0f88b643aaab7f756cf1f792a1f7899cd7a43686a82c094eee81e10ac549d5cc877e3b09499ac2eeff
- TLSH
  T1161163B85B876198E82B45E018A6CD2C2E9DB56C11714221B2BEFD7547A0A830F69E42
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  data/flutter_assets/assets/images/Comet_Logo.svg
- Size 5KB
- SHA256 7a4d63bc65fd753d5b83cb7f10d5b5b50b5ca69821be4014129a26bc85195430
- MD5 4f866ea65ea753e4932f160399359a6f
- SHA1 dcc882c4454c200e48563b5c63235f5eae20e6ab
- SHA512 6c6248a7b4747be3e2faeb06b33f9fda98d67bfa494a7f1a66babf273592cce2abafc0c0641dd80d49358f020de487445939d46c558ef1fe4877145e5e7ce489
- SSDEEP 96:Pd3j6Ed8ghqAmkgA+HjVcvXaIApqaBONlzZNyXZmEz6jjismISJr3U+:F/QAmkgAIjVcvXZugZNefgW/IS5U+
- TLSH
  T1AEB186F7539423E09443ABDCEF13A8A2B95634F87E50C7D58674EBD0BA120AA499CC90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral25 behavioral26
- Target
  data/flutter_assets/assets/images/Install_Background.png
- Size 136KB
- SHA256 47b50a09269d33908f048a89d2e843ec1f9f4b320c0c5a47b9e7ee6b48119eee
- MD5 339522f87471f5cd6b43632ade92f3c1
- SHA1 8e9ad25ae3a87c35d77ba0edfaf0d93228a66fa9
- SHA512 a87bbb6eb11b8f9a07d84cf4f61f6745231d5c5fad26f9445b74d41dd897747938ad84507ae1af6c1ae3bca5c5fd8522953cf680f2ce8f511e641e5cdeac4143
- SSDEEP 3072:bdAdlhuJrCDuIonAC2Sj6Nb4CNWjyXUlZGnwTPHNrOx:mfhsPAd1Nb4pjMnnwtOx
- TLSH
  T160D312F930CCBF8881462BE614DDB113709C6B00213BCF9B9D67491AD26D59F9B9CAC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  data/flutter_assets/assets/images/Install_First.png
- Size 36KB
- SHA256 ac0f9b78b74816280cb41c9528c12d8a337ab3f96d9c326d11c1c75e948b1d3c
- MD5 37bf16b195e917f1b1961cba1cf14208
- SHA1 72b27c08b2ae7fdf7b8903568f322bc54e14b6a2
- SHA512 500c4123076ac85da4deced2e9963cdc6e5a37894f0d098a82c29186ef7434483339dab697176027a538f56d7c5d9839b0c82adeb9660543ece339dd9a582a9d
- SSDEEP 768:Pn6GCkjveNDun3ZULCl5HCgkeyCJ+CPerXeup72n/nYFGgsFXHcdc:Pn6GCqnaul5HCgket+FXeyanY07FXUc
- TLSH
  T113F2F1F47D9D9E9326CE301393A8D5DBE2887C9B5285BDC41734321056DB2B822CBF61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  data/flutter_assets/assets/images/Install_Second.png
- Size 9KB
- SHA256 862c9d35f69edc3aefa1278fd3729ab92d946d2d9e0be822cde0d35a25abc94b
- MD5 fee9b192f60708c40707b83151e4c57a
- SHA1 67b20de3db9ae0722d8e3f5b5768e008eedf9f09
- SHA512 d8ad55cf4a852e04e117ffcdbb87f3c6f4f75037646e7ac672de066b48cf798cd0cb146d63188c6be36eb12aaafc2b78712190ab828861de76e0110dc6a8c2c1
- SSDEEP 192:A5N/DApP1PtFTat5AZ4chCx1E3aa/UWh3tgKBPPnjEkEjch6YXqUf:2kvy+Cxa3aa/jptgy0gcGLf
- TLSH
  T15312AFB772BDF5BA349789BD2C77EF238A73150358C3DE49D99080685A80F1CB844807
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32