darkcomet | 24a221f7354fc10d013a80ec9bfccac9722d03b64f0bfdab06f20abab2ec301e | Triage

Sharing

General

Target

24a221f7354fc10d013a80ec9bfccac9722d03b64f0bfdab06f20abab2ec301e
Size

743KB
Sample

221030-r5qn7aegh8
MD5

938c2d1fc83e69a6fb33fbfd5dca3ea1
SHA1

82c6740dfbe5e05595ad659b6fb8efd36f46e480
SHA256

24a221f7354fc10d013a80ec9bfccac9722d03b64f0bfdab06f20abab2ec301e
SHA512

ab2a49fd2459ab3598693d4c004e9d3194db636689da4f83ae9edaf78a16a5957bed516f98e0cc2123e9d2a04dac91608a07a0c071af2b93711a386646370523
SSDEEP

12288:p8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORix:iUKoN0bUxgGa/pfBHDb+y1HgZ

Score

10^/10

darkcomet evasion rat trojan

Malware Config

Targets

- Target
  
  24a221f7354fc10d013a80ec9bfccac9722d03b64f0bfdab06f20abab2ec301e
- Size
  
  743KB
- MD5
  
  938c2d1fc83e69a6fb33fbfd5dca3ea1
- SHA1
  
  82c6740dfbe5e05595ad659b6fb8efd36f46e480
- SHA256
  
  24a221f7354fc10d013a80ec9bfccac9722d03b64f0bfdab06f20abab2ec301e
- SHA512
  
  ab2a49fd2459ab3598693d4c004e9d3194db636689da4f83ae9edaf78a16a5957bed516f98e0cc2123e9d2a04dac91608a07a0c071af2b93711a386646370523
- SSDEEP
  
  12288:p8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORix:iUKoN0bUxgGa/pfBHDb+y1HgZ
Score

10^/10

darkcomet evasion rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometevasionrattrojan

behavioral2

darkcometevasionrattrojan