Overview

overview

10

Static

static

10

5dbb3051fe...a4.exe

windows7-x64

10

5dbb3051fe...a4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5dbb3051fe537edf5768c55be5dec10c3367391ca41d8bb666e24fbf9542dfa4

  • Size

    658KB

  • Sample

    220731-2g1jlaccep

  • MD5

    40118b1261b758316db9048da1479e2c

  • SHA1

    e9ef0f064844300f1ec223eac3ea05d9252273c2

  • SHA256

    5dbb3051fe537edf5768c55be5dec10c3367391ca41d8bb666e24fbf9542dfa4

  • SHA512

    b56bbe32967be3c38c8a0ec33a1f252f70fc8ea1dfd0e11ca67fc8388a0728d2f00e7ee72a921dd947210a3570ecf4517d41869a9bfde785fee86d1d2a926a0c

Score
10/10
darkcometguest16rattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

zanyar1993.no-ip.biz:1604

Mutex

DC_MUTEX-WNE28DH

Attributes
  • gencode

    6nWk6qz5VYCM

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      5dbb3051fe537edf5768c55be5dec10c3367391ca41d8bb666e24fbf9542dfa4

    • Size

      658KB

    • MD5

      40118b1261b758316db9048da1479e2c

    • SHA1

      e9ef0f064844300f1ec223eac3ea05d9252273c2

    • SHA256

      5dbb3051fe537edf5768c55be5dec10c3367391ca41d8bb666e24fbf9542dfa4

    • SHA512

      b56bbe32967be3c38c8a0ec33a1f252f70fc8ea1dfd0e11ca67fc8388a0728d2f00e7ee72a921dd947210a3570ecf4517d41869a9bfde785fee86d1d2a926a0c

    Score
    10/10
    darkcometrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks