General

  • Target

    https://github.com/kheiron1337/icraat

  • Sample

    240211-a92tksaf6z

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

80.208.221.140:3048

Mutex

DC_MUTEX-7SW877C

Attributes
  • gencode

    iX3UiRGJM1JW

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      https://github.com/kheiron1337/icraat

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks