Overview

overview

7

Static

static

1

comet_inst...st.exe

windows10-2004-x64

4

comet_inst...st.exe

windows11-21h2-x64

4

data/flutt...st.bin

windows10-2004-x64

3

data/flutt...st.bin

windows11-21h2-x64

3

data/flutt...t.json

windows10-2004-x64

3

data/flutt...t.json

windows11-21h2-x64

3

data/flutt...t.json

windows10-2004-x64

3

data/flutt...t.json

windows11-21h2-x64

3

data/flutt...CES.gz

windows10-2004-x64

1

data/flutt...CES.gz

windows11-21h2-x64

1

data/flutt...t.json

windows10-2004-x64

3

data/flutt...t.json

windows11-21h2-x64

3

data/flutt...rt.pem

windows10-2004-x64

3

data/flutt...rt.pem

windows11-21h2-x64

3

data/flutt...ar.ttf

windows10-2004-x64

7

data/flutt...ar.ttf

windows11-21h2-x64

3

data/flutt...um.ttf

windows10-2004-x64

7

data/flutt...um.ttf

windows11-21h2-x64

3

data/flutt...ar.ttf

windows10-2004-x64

7

data/flutt...ar.ttf

windows11-21h2-x64

3

data/flutt...ht.ttf

windows10-2004-x64

7

data/flutt...ht.ttf

windows11-21h2-x64

3

data/flutt...on.png

windows10-2004-x64

1

data/flutt...on.png

windows11-21h2-x64

data/flutt...go.svg

windows10-2004-x64

3

data/flutt...go.svg

windows11-21h2-x64

4

data/flutt...nd.png

windows10-2004-x64

1

data/flutt...nd.png

windows11-21h2-x64

data/flutt...st.png

windows10-2004-x64

1

data/flutt...st.png

windows11-21h2-x64

data/flutt...nd.png

windows10-2004-x64

1

data/flutt...nd.png

windows11-21h2-x64

Analysis

  • max time kernel
    149s
  • max time network
    138s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    03/05/2026, 04:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    comet_installer_latest.exe
  • Size 14.0MB
  • Sample260503-exmlcabv9t
  • SHA256 cc50f2aafb778c21b702c246ed480a14615208799113a29793962c3a8401beb7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discovery

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 16 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of AdjustPrivilegeToken 42 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\comet_installer_latest.exe
    "C:\Users\Admin\AppData\Local\Temp\comet_installer_latest.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:388
    • C:\Users\Admin\AppData\Local\Temp\CometInstaller\comet_installer.exe
      C:\Users\Admin\AppData\Local\Temp\CometInstaller\comet_installer.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1104
      • C:\Users\Admin\AppData\Local\Temp\CometInstaller\crashpad_handler.exe
        C:\Users\Admin\AppData\Local\Temp\CometInstaller\crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native --metrics-dir=C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native --url=https://o4504136533147648.ingest.us.sentry.io:443/api/4509691398324225/minidump/?sentry_client=sentry.native.flutter/0.9.0&sentry_key=861faca2cfd783cbbc742acc00e1601e --attachment=C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native\2d725787-e3e2-4ffe-4d2b-c4c36eeb1abd.run\__sentry-event --attachment=C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native\2d725787-e3e2-4ffe-4d2b-c4c36eeb1abd.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native\2d725787-e3e2-4ffe-4d2b-c4c36eeb1abd.run\__sentry-breadcrumb2 --initial-client-data=0x4dc,0x4e0,0x4e4,0x4c8,0x4e8,0x7ff8623d90c0,0x7ff8623d90d8,0x7ff8623d90f0
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3708
      • C:\Windows\System32\Wbem\wmic.exe
        wmic ComputerSystem get TotalPhysicalMemory /VALUE
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:1416

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        __sentry-event
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\.sentry-native\2d725787-e3e2-4ffe-4d2b-c4c36eeb1abd.run\__sentry-event
        • Size 580B
        • SHA256 8ffec758befc8cadd1a4918fa169698a9a49fa92b7922433434a084a07f6b1f8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\VCRUNTIME140.dll
        • Size 94KB
        • SHA256 69ae8da07c71d09728260897375c7f0ddd317499969f32a4a2971967aa1dc9de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\VCRUNTIME140_1.dll
        • Size 36KB
        • SHA256 67a4a07ee9fa855c7a505d78569f403430d9dc4a06f04ad8dcf55afba4224009
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        comet_installer.exe
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\comet_installer.exe
        • Size 258KB
        • SHA256 b1834ea2004df31973962943d3e0ea6eb7e07ae522a032386cc9e9c40b5324e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        crashpad_handler.exe
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\crashpad_handler.exe
        • Size 648KB
        • SHA256 c8c2c44b085ddba797ea79de92095d478611dc09607e527ea136ca547ccfc127
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        crashpad_wer.dll
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\crashpad_wer.dll
        • Size 24KB
        • SHA256 7e262eb9f84034547ea2a184c189bac7ffe8fde7a0f7599a9930d1b0f747af1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app.so
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\app.so
        • Size 6.9MB
        • SHA256 4b1de1175e34f580c22dbac51185dcef4df8ee28cc1719ad3b9284617d05e3ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AssetManifest.bin
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\AssetManifest.bin
        • Size 1KB
        • SHA256 f5f212282b564bcb48dfad27444bb4ba1ff441a8f11b110de5d1846652273958
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FontManifest.json
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\FontManifest.json
        • Size 500B
        • SHA256 6cc627bfae80ea744ed3f0f5c264a38964f3566525726228fb16031312335410
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        NOTICES.Z
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\NOTICES.Z
        • Size 85KB
        • SHA256 c1e625f75d3ae0a8524ce677232d0142c7cbe523f46fc9dc10155786016d4798
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NativeAssetsManifest.json
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\NativeAssetsManifest.json
        • Size 45B
        • SHA256 9548a31e4a048135c1d94f919328bfb62ae2c7bb3cab96557c7941daa97776cb
        • MD5 SHA1 SHA512
        Submit Download

        cacert.pem
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\certs\cacert.pem
        • Size 222KB
        • SHA256 64dfd5b1026700e0a0a324964749da9adc69ae5e51e899bf16ff47d6fd0e9a5e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FKGrotesk-Regular.ttf
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\fonts\FKGrotesk-Regular.ttf
        • Size 177KB
        • SHA256 febff90f328edfee81b410afeb30a4647c4dcee262d5fc6f9bc5a4b16d07b287
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FKGroteskNeue-Medium.ttf
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\fonts\FKGroteskNeue-Medium.ttf
        • Size 193KB
        • SHA256 ec9ca3ce004894970235306c5c715a0a8ba4d5e49d3ebd1bc60d5dbf74aa2972
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FKGroteskNeue-Regular.ttf
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\fonts\FKGroteskNeue-Regular.ttf
        • Size 195KB
        • SHA256 8ecdf9159eecdd0b185efcdcfa1642be7e631207b9c7181aa435c0e00967b077
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PPEditorialNew-Ultralight.ttf
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\fonts\PPEditorialNew-Ultralight.ttf
        • Size 89KB
        • SHA256 b564eba9ea02a1b2ca76727803de45c56c0bee373d30d5058623eff432245c0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Comet_Logo.svg
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\images\Comet_Logo.svg
        • Size 5KB
        • SHA256 7a4d63bc65fd753d5b83cb7f10d5b5b50b5ca69821be4014129a26bc85195430
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        home_background.png
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\images\home_background.png
        • Size 432KB
        • SHA256 f852ce8a4360d77df10f28e491ebfd846e1968cabf6ce07a56a2ddbdb87545c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        play_icon.svg
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\assets\images\play_icon.svg
        • Size 233B
        • SHA256 df55ea54d2759a4cbfee58877723f38975f9e6e622e0bfd525363a6491cd563a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        MaterialIcons-Regular.otf
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\flutter_assets\fonts\MaterialIcons-Regular.otf
        • Size 1.6MB
        • SHA256 d9865b671a09d683d13a863089d8825e0f61a37696ce5d7d448bc8023aa62453
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\data\icudtl.dat
        • Size 760KB
        • SHA256 c12537022ef818991a7bfed41a76d8d6ae962ffbc0e6511ac762a5d0845e7f7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        flutter_windows.dll
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\flutter_windows.dll
        • Size 18.2MB
        • SHA256 e7ea249ccfcacf2e480b77f07edc5a054f3cee191eb3ae814c31866f89d14c77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hotkey_manager_windows_plugin.dll
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\hotkey_manager_windows_plugin.dll
        • Size 115KB
        • SHA256 c24a728b92313c0a3ef91431f856164313debc326a31f36300846ebc964b8f65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\msvcp140.dll
        • Size 554KB
        • SHA256 92b315040c9cdb42492c8bf19339f95b758dabba6e492263cc00231a4c161f29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        screen_retriever_plugin.dll
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\screen_retriever_plugin.dll
        • Size 111KB
        • SHA256 3391657f60730dd684669558fa18977d1e26658f856235a3778aa09892abffb9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sentry.dll
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\sentry.dll
        • Size 315KB
        • SHA256 9d80e8214fb19054f621f906049ca9b38cdc68880bf279c45fe32084182d8290
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        url_launcher_windows_plugin.dll
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\url_launcher_windows_plugin.dll
        • Size 107KB
        • SHA256 0812efeb0546f298e0dcc3ece7977e817b244955ad780aecd3fe14fb4bce61f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        window_manager_plugin.dll
        • Path C:\Users\Admin\AppData\Local\Temp\CometInstaller\window_manager_plugin.dll
        • Size 139KB
        • SHA256 e146d77954a0050608cdf1413aa2928613e9385d93f3b7782a45bfd5f380b9bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1104-67-0x0000026CF41E0000-0x0000026CF48C9000-memory.dmp
        Download

        memory/1104-66-0x0000026CF41E0000-0x0000026CF48C9000-memory.dmp
        Download

        memory/1104-68-0x0000026CF1C40000-0x0000026CF1C41000-memory.dmp
        Download

        memory/1104-65-0x0000026CF41E0000-0x0000026CF48C9000-memory.dmp
        Download

        memory/1104-64-0x0000026CF1C30000-0x0000026CF1C31000-memory.dmp
        Download

        memory/1104-110-0x0000026CF02F0000-0x0000026CF0321000-memory.dmp
        Download

        memory/1416-115-0x00000183388A0000-0x00000183388D1000-memory.dmp
        Download

        memory/3708-111-0x0000012BB3CD0000-0x0000012BB3D01000-memory.dmp
        Download