General

  • Target

    d7007466cf5f00ddd00d8eef8147bedd4372b83066f38213c9428bb96b06001a

  • Size

    658KB

  • Sample

    221003-tlhwcaebel

  • MD5

    64597e4e804cb1e9316931ec4d7749c0

  • SHA1

    2435b3976f16baef4e40f10f3a22c1d709016c06

  • SHA256

    d7007466cf5f00ddd00d8eef8147bedd4372b83066f38213c9428bb96b06001a

  • SHA512

    da2b73fef275415ac4d10577b61106e18fbf4810ed5e41902c0cc1e9bb989f2fd256f0ba0d2f1a4cadc537298763d101a2d73891103e1e4b5fce14df028ceaca

  • SSDEEP

    12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hN:mZ1xuVVjfFoynPaVBUR8f+kN10EBD

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-9JMX4JL

Attributes
  • gencode

    R0tSYvbHuFlN

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      d7007466cf5f00ddd00d8eef8147bedd4372b83066f38213c9428bb96b06001a

    • Size

      658KB

    • MD5

      64597e4e804cb1e9316931ec4d7749c0

    • SHA1

      2435b3976f16baef4e40f10f3a22c1d709016c06

    • SHA256

      d7007466cf5f00ddd00d8eef8147bedd4372b83066f38213c9428bb96b06001a

    • SHA512

      da2b73fef275415ac4d10577b61106e18fbf4810ed5e41902c0cc1e9bb989f2fd256f0ba0d2f1a4cadc537298763d101a2d73891103e1e4b5fce14df028ceaca

    • SSDEEP

      12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hN:mZ1xuVVjfFoynPaVBUR8f+kN10EBD

    Score
    10/10
    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks