General
- Target CometSploit.zip
- Size 24.4MB
- Sample260723-th7ejafn8s
- SHA256 053e0ea2ecbec6faadcfd80b8facf9775a11f4aeef90ec4c37ae6be5bdcc4133
- MD5 95c0637ca9a41b04714aa5405fc89646
- SHA1 778078218e3484744349fe1de6190a3fdfa72a45
- SHA512 523edeac2cd2d648a82b2f8d0af6a95ae255e187832bef88aa394a9e2a2b1fab71d034e11b8dba74a21fcc9278a2fac870ebc6b1d40366f751274e25ab1af82d
- SSDEEP 393216:ZR1YqDtgKki5fvDLiWI3g2yYqW42e7MUceyQ+L8hhels1/oMnFGbQpsUCg:ZomgKki5HHTOKDcQE8iihNnkbQpgg
- TLSH T1DD4733DC46DFC1DF2C19B9A70BE09281A1F3582B8DA6E157803EC1E73CACF0694A7655
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
CometSploit.exe
Resource
win10v2004-20260513-en
13 signatures
300 seconds
Behavioral task
behavioral2
Sample
CometSploit.exe
Resource
win11ltsc2024-20260709-en
12 signatures
300 seconds
Malware Config
Targets
-
- Target CometSploit.exe
- Size 52.2MB
- SHA256 5645d099e8a49e6ed3a8c61511f9ee0f0fda3c71d18de54a242b86115e38fd98
- MD5 5a58d69d1b568fd8d9b9e533dd17605e
- SHA1 3231440cf79abc64518f6b658589da565ae9014c
- SHA512 62b9af507ed0e40f4062d23203b458d5749a2f73b57bbdcef34821dd6cfb816a310ecf7a572ee371bc27a997ff8714d846f7a72f1e42c3fe939e82855c9fd945
- SSDEEP 393216:8+AEGHdPInqftRnGg9pH07xLfUxf7T6ZUrxy:8+AExqftRbpH0BfUxf7Ti
- TLSH T13FC7BE13F6821166C2975075CD768342F3343C22BB2582DBBA6C6AE85F5B5E01AF27F4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.