darkcomet | fbad4b96820c1d1d4f1945c50b10d09d9b8e0c2d0506db8d2d3091f46fe8bde8 | Triage

Sharing

General

Target

fbad4b96820c1d1d4f1945c50b10d09d9b8e0c2d0506db8d2d3091f46fe8bde8
Size

658KB
Sample

221126-saf2yaca27
MD5

02353307175a7aaddd0cf29bdd15f799
SHA1

5d125da83e6cc61455084a603528a1187178eaa5
SHA256

fbad4b96820c1d1d4f1945c50b10d09d9b8e0c2d0506db8d2d3091f46fe8bde8
SHA512

429222cf21a2b7529ed9d8639effd8f300f1853aaf07c3a53433d88f8caa01b04836e213351a25546433581aab0a71da059ae55aaf9cbe147eb43bdcde681160
SSDEEP

12288:a9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hT:WZ1xuVVjfFoynPaVBUR8f+kN10EBl

Score

10^/10

darkcomet slaves rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Slaves

C2

g87.ddns.net:200

Mutex

DCMIN_MUTEX-ANQGUQL

Attributes

gencode
vxYs9Drk6yJ5
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  fbad4b96820c1d1d4f1945c50b10d09d9b8e0c2d0506db8d2d3091f46fe8bde8
- Size
  
  658KB
- MD5
  
  02353307175a7aaddd0cf29bdd15f799
- SHA1
  
  5d125da83e6cc61455084a603528a1187178eaa5
- SHA256
  
  fbad4b96820c1d1d4f1945c50b10d09d9b8e0c2d0506db8d2d3091f46fe8bde8
- SHA512
  
  429222cf21a2b7529ed9d8639effd8f300f1853aaf07c3a53433d88f8caa01b04836e213351a25546433581aab0a71da059ae55aaf9cbe147eb43bdcde681160
- SSDEEP
  
  12288:a9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hT:WZ1xuVVjfFoynPaVBUR8f+kN10EBl
Score

10^/10

darkcomet rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

slavesdarkcomet

behavioral1

darkcometrattrojan

behavioral2

darkcometrattrojan