Overview

overview

10

Static

static

10

15b66cc7fb...4a.exe

windows7-x64

10

15b66cc7fb...4a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15b66cc7fbf50e4294625561380fe3074e6e6048eb156225e6e4dc6ab29b0d4a

  • Size

    658KB

  • Sample

    221123-3rg1nsda97

  • MD5

    4b319e1920209b19ca72e01d0451bd40

  • SHA1

    687e4bd12343691fa4ee32e3f61122cde9ee8fed

  • SHA256

    15b66cc7fbf50e4294625561380fe3074e6e6048eb156225e6e4dc6ab29b0d4a

  • SHA512

    1d02534499b2f9a43434e4696451e1524cce9275b0ae9395bb4314e57ebee60e4c179cba9cdfc8627ebe8b6e84c2d0cb0cc54871c13b1e11a9acef918c673714

  • SSDEEP

    12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hh:uZ1xuVVjfFoynPaVBUR8f+kN10EBb

Score
10/10
darkcometpicturesrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Pictures

C2

mugensrat.no-ip.biz:100

Mutex

DC_MUTEX-S64C2C8

Attributes
  • gencode

    EYKifd8g8sX8

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      15b66cc7fbf50e4294625561380fe3074e6e6048eb156225e6e4dc6ab29b0d4a

    • Size

      658KB

    • MD5

      4b319e1920209b19ca72e01d0451bd40

    • SHA1

      687e4bd12343691fa4ee32e3f61122cde9ee8fed

    • SHA256

      15b66cc7fbf50e4294625561380fe3074e6e6048eb156225e6e4dc6ab29b0d4a

    • SHA512

      1d02534499b2f9a43434e4696451e1524cce9275b0ae9395bb4314e57ebee60e4c179cba9cdfc8627ebe8b6e84c2d0cb0cc54871c13b1e11a9acef918c673714

    • SSDEEP

      12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hh:uZ1xuVVjfFoynPaVBUR8f+kN10EBb

    Score
    10/10
    darkcometrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks