Extracted

• • Target
    VOİDEN.exe
  • Size 251KB
  • SHA256 adc0ceab10fd907cd7c7926dfea9699f215e6ccbca1092d89fff07a218a97674
  • MD5 a472b2ba2cc42fa50c5f3f43f1ea3ea6
  • SHA1 36ab3f37384f9915908d9af50fb2b5de07929e51
  • SHA512 e76c491a57e426f329482056c73a6e413a21850c9ae76b06195c909ae2f8e16fba25749c9f26a21a5147a856c17dd1fe0b45d4d475a3d448d8ff0129350061ef
  • SSDEEP 6144:ZcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37T:ZcW7KEZlPzCy37
  • TLSH
    T1A34422A57BC99C43EAFEAEFC065D0B145B0433DB1EEE83929F2103087196A96175723D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  guest16discoverydarkcometrattrojanupxpersistenceransomware

  • Family: Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Downloads MZ/PE file

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2
• • Target
    out.upx
  • Size 658KB
  • SHA256 05cce840acc283352b40f674664116a6ee8bb72168edc4448bae58d05de1a40d
  • MD5 544c985eb8c605814f8592d2a40e7ae7
  • SHA1 28bffc35994ec21f7bd1c46a84a7679b14e6e276
  • SHA512 237ff80bae6b4c55aa5e3e9378bb527ec40c77aa3c00c0f21b9c822acd23f2ae38f2e4394cc0c942b65a0cdfcf3d611a7f8243d7d772c665ae45483fa3095670
  • SSDEEP 12288:D9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9EkNC/:NZ1xuVVjfFoynPaVBUR8f+kN10Ed
  • TLSH
    T1A3E46C31F6808837DD7219789C5F81E6982A7E212E39754B3AE61F0C5F3D6C239262D7
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral3behavioral4