darkcomet | 4daeb1a886ee9de9e2db6212234a3ef9669c12f34a6e06a2e4df1f7479788e11 | Triage

Sharing

General

Target

4daeb1a886ee9de9e2db6212234a3ef9669c12f34a6e06a2e4df1f7479788e11
Size

658KB
Sample

221119-vhfr9abf58
MD5

567b5b0104551091df9437df968ff020
SHA1

7534186ce9cda13e6b2281ff38df101c2709b83d
SHA256

4daeb1a886ee9de9e2db6212234a3ef9669c12f34a6e06a2e4df1f7479788e11
SHA512

fba89e90c58bb2a7464801082e151d458cf3af3d93778cb36dad90764c1e760fb64ad89746fe1db3f3c973215669031cbbc7703e8356ac5fcc459fbba3e71bda
SSDEEP

12288:a9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hX:WZ1xuVVjfFoynPaVBUR8f+kN10EBF

Score

10^/10

darkcomet slaves rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Slaves

C2

slug.no-ip.biz:200

Mutex

DC_MUTEX-J754ETV

Attributes

gencode
L91u2XhcQAtf
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  4daeb1a886ee9de9e2db6212234a3ef9669c12f34a6e06a2e4df1f7479788e11
- Size
  
  658KB
- MD5
  
  567b5b0104551091df9437df968ff020
- SHA1
  
  7534186ce9cda13e6b2281ff38df101c2709b83d
- SHA256
  
  4daeb1a886ee9de9e2db6212234a3ef9669c12f34a6e06a2e4df1f7479788e11
- SHA512
  
  fba89e90c58bb2a7464801082e151d458cf3af3d93778cb36dad90764c1e760fb64ad89746fe1db3f3c973215669031cbbc7703e8356ac5fcc459fbba3e71bda
- SSDEEP
  
  12288:a9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hX:WZ1xuVVjfFoynPaVBUR8f+kN10EBF
Score

10^/10

darkcomet rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

slavesdarkcomet

behavioral1

darkcometrattrojan

behavioral2

darkcometrattrojan