darkcomet | 3a038a33857bc03440666d1f14dd5c4420fac18af4c2d74bb9106b57e36d26fb | Triage

Sharing

General

Target

ed7a6a2baecbd71fa6a28493ad24490b_JaffaCakes118
Size

658KB
Sample

240411-p8by4abh94
MD5

ed7a6a2baecbd71fa6a28493ad24490b
SHA1

455ca6e0814c818dc1fd06b20a33d88b7b6242af
SHA256

3a038a33857bc03440666d1f14dd5c4420fac18af4c2d74bb9106b57e36d26fb
SHA512

af8f6b5a91756f0e9fc2ba29ac1e856d229a10a728762480ce8bf5f9a44d059e9afe07dcf8fef0534cfb6a5254de60502281d82e87d80ae7ee08bfeb788e2467
SSDEEP

12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hD:mZ1xuVVjfFoynPaVBUR8f+kN10EBF

Score

10^/10

darkcomet guest16 rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-BTU7T96

Attributes

gencode
Lp19hGaN6lug
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  ed7a6a2baecbd71fa6a28493ad24490b_JaffaCakes118
- Size
  
  658KB
- MD5
  
  ed7a6a2baecbd71fa6a28493ad24490b
- SHA1
  
  455ca6e0814c818dc1fd06b20a33d88b7b6242af
- SHA256
  
  3a038a33857bc03440666d1f14dd5c4420fac18af4c2d74bb9106b57e36d26fb
- SHA512
  
  af8f6b5a91756f0e9fc2ba29ac1e856d229a10a728762480ce8bf5f9a44d059e9afe07dcf8fef0534cfb6a5254de60502281d82e87d80ae7ee08bfeb788e2467
- SSDEEP
  
  12288:q9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hD:mZ1xuVVjfFoynPaVBUR8f+kN10EBF
Score

10^/10

darkcomet guest16 rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

guest16darkcomet

behavioral1

darkcometguest16rattrojan

behavioral2

darkcometguest16rattrojan