Resubmissions

10-12-2024 08:15

241210-j5nwlazqas 10

28-11-2022 01:03

221128-beqy9sce65 10

General

  • Target

    197cef0a8c37661eb17220eadd936709eeab7844080d089f44d89803d4a7a946

  • Size

    658KB

  • Sample

    221128-beqy9sce65

  • MD5

    0575c74ae9681d4a3ca5c36219e4c9f8

  • SHA1

    1caf9c381dff41502d07633ce6185a4f8a357b46

  • SHA256

    197cef0a8c37661eb17220eadd936709eeab7844080d089f44d89803d4a7a946

  • SHA512

    2f408011cd748a6af3ee46a3edf16be4f4a1dab918391bfc07e6806b427f873e11e764c65e6671fa203e1940ada8c1e4184a50d0d16b4a5aef7757340dce9bad

  • SSDEEP

    12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hN:uZ1xuVVjfFoynPaVBUR8f+kN10EB/

Malware Config

Extracted

Family

darkcomet

Botnet

Test

C2

127.0.0.1:1604

Mutex

DC_MUTEX-7NSPUSQ

Attributes
  • gencode

    tS2wU760jKeo

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      197cef0a8c37661eb17220eadd936709eeab7844080d089f44d89803d4a7a946

    • Size

      658KB

    • MD5

      0575c74ae9681d4a3ca5c36219e4c9f8

    • SHA1

      1caf9c381dff41502d07633ce6185a4f8a357b46

    • SHA256

      197cef0a8c37661eb17220eadd936709eeab7844080d089f44d89803d4a7a946

    • SHA512

      2f408011cd748a6af3ee46a3edf16be4f4a1dab918391bfc07e6806b427f873e11e764c65e6671fa203e1940ada8c1e4184a50d0d16b4a5aef7757340dce9bad

    • SSDEEP

      12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hN:uZ1xuVVjfFoynPaVBUR8f+kN10EB/

    Score
    10/10
    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

MITRE ATT&CK Enterprise v6

Tasks