darkcomet

Resubmissions

05/02/2025, 07:15

250205-h3bb2swkgw 10

01/10/2022, 23:38

221001-3m1bfsddfr 10

Sharing

Copy URL

Twitter E-mail

General

Target

b5d124db5d66a5d485386c072e17817af44a82353735eb5bb51f6d3890fbf734
Size

650KB
Sample

221001-3m1bfsddfr
MD5

6f182568b036db62c171ff3bfe774ea0
SHA1

28755d5099480a9cb6150a1647e0e2cb304b2183
SHA256

b5d124db5d66a5d485386c072e17817af44a82353735eb5bb51f6d3890fbf734
SHA512

2f31f0bf2778d1a362bc93cb9045a43951d4c81aa589c19c839d3a40a4ccb0f89266c17357fee158b07d020f58eb6343c2a8bbdbdeb3597205cc6f73f4091911
SSDEEP

12288:Y8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORixK:xUKoN0bUxgGa/pfBHDb+y1HgZA

Score

10^/10

Malware Config

Targets

- Target
  
  b5d124db5d66a5d485386c072e17817af44a82353735eb5bb51f6d3890fbf734
- Size
  
  650KB
- MD5
  
  6f182568b036db62c171ff3bfe774ea0
- SHA1
  
  28755d5099480a9cb6150a1647e0e2cb304b2183
- SHA256
  
  b5d124db5d66a5d485386c072e17817af44a82353735eb5bb51f6d3890fbf734
- SHA512
  
  2f31f0bf2778d1a362bc93cb9045a43951d4c81aa589c19c839d3a40a4ccb0f89266c17357fee158b07d020f58eb6343c2a8bbdbdeb3597205cc6f73f4091911
- SSDEEP
  
  12288:Y8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORixK:xUKoN0bUxgGa/pfBHDb+y1HgZA
Score

10^/10

darkcomet evasion rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Modifies firewall policy service
  evasion
- Modifies security service
  evasion
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

T1031

Privilege Escalation

Defense Evasion

Disabling Security Tools

T1089

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Modifies firewall policy service

Modifies security service

Windows security bypass

Windows security modification

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2