darkcomet | f8079cd3ec836d90cb021ece63daf41b407b218a35f30dbe6d6fb142545318a9 | Triage

Sharing

General

Target

f8079cd3ec836d90cb021ece63daf41b407b218a35f30dbe6d6fb142545318a9
Size

333KB
Sample

201106-9bkvmc58an
MD5

82522c4ce53b5ed7abe7490eb9323079
SHA1

320d44a2c2ba3e1beecb0a614a3537d7966fe800
SHA256

f8079cd3ec836d90cb021ece63daf41b407b218a35f30dbe6d6fb142545318a9
SHA512

65eb11cf8455e3a34ee18c576e788d5121692c8fc7c911f1f22384fea82b7f89cba33992dcd4b479d8f018341c03eb55e8b9624838c83f2e6e6ce6ece6e3fda9

Score

10^/10

darkcomet persistence rat trojan

Malware Config

Targets

- Target
  
  f8079cd3ec836d90cb021ece63daf41b407b218a35f30dbe6d6fb142545318a9
- Size
  
  333KB
- MD5
  
  82522c4ce53b5ed7abe7490eb9323079
- SHA1
  
  320d44a2c2ba3e1beecb0a614a3537d7966fe800
- SHA256
  
  f8079cd3ec836d90cb021ece63daf41b407b218a35f30dbe6d6fb142545318a9
- SHA512
  
  65eb11cf8455e3a34ee18c576e788d5121692c8fc7c911f1f22384fea82b7f89cba33992dcd4b479d8f018341c03eb55e8b9624838c83f2e6e6ce6ece6e3fda9
Score

10^/10

darkcomet persistence rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometpersistencerattrojan

behavioral2

darkcometpersistencerattrojan