darkcomet | d3fbd6d2947174c8856d0e63595bbcbaa92d96d303d5fb28042526ffbad4cc0f | Triage

Sharing

General

Target

9819ce7a41ac47070d178e2d3d2b29ba_JaffaCakes118
Size

658KB
Sample

240402-1qbq6aee6x
MD5

9819ce7a41ac47070d178e2d3d2b29ba
SHA1

3e62f0fb38784f4606783a2604513ba22f3c08ea
SHA256

d3fbd6d2947174c8856d0e63595bbcbaa92d96d303d5fb28042526ffbad4cc0f
SHA512

cbddf14f7547ac20635ade2f8108260a4f3558cd771c0fb0499deb61305f7b1185f4a753bbd8050cd4b79301c3aa0fd2f935a8ca9f0bc2b933d77764694f64aa
SSDEEP

12288:29HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFG:SiBIGkbxqEcjsWiDxguehC2Sd

Score

10^/10

darkcomet guest16 rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-4KLSS74

Attributes

gencode
EftMPU0wCXcB
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  9819ce7a41ac47070d178e2d3d2b29ba_JaffaCakes118
- Size
  
  658KB
- MD5
  
  9819ce7a41ac47070d178e2d3d2b29ba
- SHA1
  
  3e62f0fb38784f4606783a2604513ba22f3c08ea
- SHA256
  
  d3fbd6d2947174c8856d0e63595bbcbaa92d96d303d5fb28042526ffbad4cc0f
- SHA512
  
  cbddf14f7547ac20635ade2f8108260a4f3558cd771c0fb0499deb61305f7b1185f4a753bbd8050cd4b79301c3aa0fd2f935a8ca9f0bc2b933d77764694f64aa
- SSDEEP
  
  12288:29HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFG:SiBIGkbxqEcjsWiDxguehC2Sd
Score

10^/10

darkcomet guest16 rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

guest16darkcomet

behavioral1

darkcometguest16rattrojan

behavioral2

darkcometguest16rattrojan