darkcomet | e7b75541ddf03810c118ab501bec78f7cbfade8a0dbb018acc5dfc388bdf7c9b | Triage

Submit
Reports

Overview

overview

Static

static

e7b75541dd...9b.exe

windows7-x64

e7b75541dd...9b.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

e7b75541ddf03810c118ab501bec78f7cbfade8a0dbb018acc5dfc388bdf7c9b
Size

777KB
Sample

221020-shm58aafdm
MD5

964f7c996b0476f8aee0dcb631e0d927
SHA1

ca00f282bff3d297ae09c580773828e71c9daa10
SHA256

e7b75541ddf03810c118ab501bec78f7cbfade8a0dbb018acc5dfc388bdf7c9b
SHA512

5df85711baed26a5b5500553017860a57ed416e8a3c9cc7653430f459dcf851b79d34b73ed8f9dd5b768703b207da0ee30786d7fd71197e9450cea491f370419
SSDEEP

12288:99AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LqnK9T:rAQ6Zx9cxTmOrucTIEFSpOGA

Score

10^/10

darkcomet rat trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e7b75541ddf03810c118ab501bec78f7cbfade8a0dbb018acc5dfc388bdf7c9b.exe

Resource

win7-20220812-en

darkcomet rat trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

e7b75541ddf03810c118ab501bec78f7cbfade8a0dbb018acc5dfc388bdf7c9b.exe

Resource

win10v2004-20220812-en

darkcomet rat trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  e7b75541ddf03810c118ab501bec78f7cbfade8a0dbb018acc5dfc388bdf7c9b
- Size
  
  777KB
- MD5
  
  964f7c996b0476f8aee0dcb631e0d927
- SHA1
  
  ca00f282bff3d297ae09c580773828e71c9daa10
- SHA256
  
  e7b75541ddf03810c118ab501bec78f7cbfade8a0dbb018acc5dfc388bdf7c9b
- SHA512
  
  5df85711baed26a5b5500553017860a57ed416e8a3c9cc7653430f459dcf851b79d34b73ed8f9dd5b768703b207da0ee30786d7fd71197e9450cea491f370419
- SSDEEP
  
  12288:99AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LqnK9T:rAQ6Zx9cxTmOrucTIEFSpOGA
Score

10^/10

darkcomet rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometrattrojan

behavioral2

darkcometrattrojan

© 2018-2025

Terms | Privacy