darkcomet | 999ddd4c7354baf1fe7bbcd14c2bf34647946759b801165cc31be4acd78cf588 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

999ddd4c7354baf1fe7bbcd14c2bf34647946759b801165cc31be4acd78cf588
Size

662KB
Sample

221201-j3b41sdd7y
MD5

96b6e607a479cec7f2bf3c487f79cd6c
SHA1

22610eee0d3241a5969daab00ef24c27d289ee56
SHA256

999ddd4c7354baf1fe7bbcd14c2bf34647946759b801165cc31be4acd78cf588
SHA512

ecec6f4a6ed7e0130be6a064e4b8fe565473abe7015c6749f886ebb2c7f039839aa8cdf59d134b803bfa2d7a5c080c3de4ec25e8c3e5d04add01f0f18485a641
SSDEEP

12288:83OpvNW4a76S/Ddon/m09bbYlIaaMcE2YGhq3vo1RnfAvIESJgoE26yc/R4:qOA4aWNn/m09fKIaaBEtWq3A1Ov8Jgbm

Score

10^/10

darkcomet guest16 rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-F54S21D

Attributes

gencode
Jl8h7pyWubx6
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  999ddd4c7354baf1fe7bbcd14c2bf34647946759b801165cc31be4acd78cf588
- Size
  
  662KB
- MD5
  
  96b6e607a479cec7f2bf3c487f79cd6c
- SHA1
  
  22610eee0d3241a5969daab00ef24c27d289ee56
- SHA256
  
  999ddd4c7354baf1fe7bbcd14c2bf34647946759b801165cc31be4acd78cf588
- SHA512
  
  ecec6f4a6ed7e0130be6a064e4b8fe565473abe7015c6749f886ebb2c7f039839aa8cdf59d134b803bfa2d7a5c080c3de4ec25e8c3e5d04add01f0f18485a641
- SSDEEP
  
  12288:83OpvNW4a76S/Ddon/m09bbYlIaaMcE2YGhq3vo1RnfAvIESJgoE26yc/R4:qOA4aWNn/m09fKIaaBEtWq3A1Ov8Jgbm
Score

10^/10

darkcomet rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

guest16darkcomet

behavioral1

darkcometrattrojan

behavioral2

darkcometrattrojan