Overview

overview

7

Static

static

5

Darkcomet.exe

windows10-ltsc_2021-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Darkcomet.exe
  • Size 9.1MB
  • Sample261017-ryq2dahs7t
  • SHA256 6f556a7eab586fa2e7c93dd43b59ee816282b38520c3f40f4ecaa0669c17e4ca
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Darkcomet.exe
    .exe 9.1MB
  • out.upx
    .exe 493KB

Darkcomet.exe

  • SHA256 6f556a7eab586fa2e7c93dd43b59ee816282b38520c3f40f4ecaa0669c17e4ca
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:5windowsx86arch:x86

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Unsigned PE

    Checks for missing Authenticode signature.

Password
////////////////////////////////////////////////////////////////////////////////////////54v5435v*34/*/-/-*/-*/-*/-*4/5-3*5/43-*/543-*/534-*5/43-*5/34-*v/3-*/e-*wv/r23-*4/-32*/-*ce/-wd*f/s-*f/ds-a*/f-3v/5-r/-43*/24-*/2a-*34/f2-4/2-3f4/-2a/r*-34/h-4/h-*4/3y-34h/67-34/-3/t-*3/v4-*/34-*/tr-*/j-*tr/-tr/-r/t-y*-*r/t-rrrrr-rr-r-r--r-r-r-rtrt*rt*r+++++++""""1"2"2"2"1"2"2"23"3"3"2121212131254251vc5234c234x324c3432c4334235235%%%%%+%+^%+^%+^%+^%^+%+^%+^%+^%+^%+^%+^%+^%+
Minor OS version
0
Major OS version
5
Entry point
541408
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths