darkcomet | 1f72838def192d3ea6979cdade845c9e7ebd0ee04036d91411b276c6632023ba

Analysis

Target

33.exe
Size

658KB
MD5

6920330200e785b2f1047e8545e8ff8b
SHA1

8d1c5cc709216069ee5a5269eaf2b8c233cbcc38
SHA256

71b0096170ce81b22f524bc51d6b2ca9005ccd7d2ffbed84bc5e4e16f45f08fb
SHA512

65a7f608e667781903ede00aa9e2bf93304cfa58d6f0b39b62d28835d619d41a42871cd6ccc3d5fb2c4b6fffadcda931ca214225af14a941b26eeeec459b20e7

Score

10^/10

Darkcomet
DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
trojan rat darkcomet
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Suspicious use of AdjustPrivilegeToken 24 IoCs

Processes:

33.exe

description	pid	process
Token: SeIncreaseQuotaPrivilege	2076	33.exe
Token: SeSecurityPrivilege	2076	33.exe
Token: SeTakeOwnershipPrivilege	2076	33.exe
Token: SeLoadDriverPrivilege	2076	33.exe
Token: SeSystemProfilePrivilege	2076	33.exe
Token: SeSystemtimePrivilege	2076	33.exe
Token: SeProfSingleProcessPrivilege	2076	33.exe
Token: SeIncBasePriorityPrivilege	2076	33.exe
Token: SeCreatePagefilePrivilege	2076	33.exe
Token: SeBackupPrivilege	2076	33.exe
Token: SeRestorePrivilege	2076	33.exe
Token: SeShutdownPrivilege	2076	33.exe
Token: SeDebugPrivilege	2076	33.exe
Token: SeSystemEnvironmentPrivilege	2076	33.exe
Token: SeChangeNotifyPrivilege	2076	33.exe
Token: SeRemoteShutdownPrivilege	2076	33.exe
Token: SeUndockPrivilege	2076	33.exe
Token: SeManageVolumePrivilege	2076	33.exe
Token: SeImpersonatePrivilege	2076	33.exe
Token: SeCreateGlobalPrivilege	2076	33.exe
Token: 33	2076	33.exe
Token: 34	2076	33.exe
Token: 35	2076	33.exe
Token: 36	2076	33.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

33.exe

pid process

2076 33.exe

pid	process
2076	33.exe

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact