Overview

overview

10

Static

static

10

0964729cb0...58.exe

windows7_x64

10

0964729cb0...58.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0964729cb05fbea81fe2e9c0c36b4064603d18b912c4bec387a0e71c51c8e458

  • Size

    349KB

  • Sample

    220521-xy3cascgf6

  • MD5

    599361a303e7a4bca2bdcbff170154d8

  • SHA1

    267214e0e8e4a17422e0e91a0f0c5570e56193fe

  • SHA256

    0964729cb05fbea81fe2e9c0c36b4064603d18b912c4bec387a0e71c51c8e458

  • SHA512

    18b94c438b26f47daa72c12f518f8fc3784cbca9df25e4e9d0c8da66a7e74f1d8eb347ac0bed8770b5101169b4a298ca5018377e64cf7649b22f8d6951bcae0f

Score
10/10
darkcometgoyrattrojanupx

Malware Config

Extracted

Family

darkcomet

Botnet

goy

C2

127.0.0.1:7777

Mutex

DC_MUTEX-UYXBDKE

Attributes
  • gencode

    UBbelSnxUxdg

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      0964729cb05fbea81fe2e9c0c36b4064603d18b912c4bec387a0e71c51c8e458

    • Size

      349KB

    • MD5

      599361a303e7a4bca2bdcbff170154d8

    • SHA1

      267214e0e8e4a17422e0e91a0f0c5570e56193fe

    • SHA256

      0964729cb05fbea81fe2e9c0c36b4064603d18b912c4bec387a0e71c51c8e458

    • SHA512

      18b94c438b26f47daa72c12f518f8fc3784cbca9df25e4e9d0c8da66a7e74f1d8eb347ac0bed8770b5101169b4a298ca5018377e64cf7649b22f8d6951bcae0f

    Score
    10/10
    darkcometrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks