darkcomet | 90e176841f0fc5bc2a02caf47c35aef8f18f8da51fabc75781e542f85124810d | Triage

Sharing

General

Target

f43e53cfd5f202f2da02f7d7e0d2f6ce_JaffaCakes118
Size

658KB
Sample

240416-y1mkasdb4s
MD5

f43e53cfd5f202f2da02f7d7e0d2f6ce
SHA1

70be2900b10787c7ca354b64de4d0a0dab2f8b9f
SHA256

90e176841f0fc5bc2a02caf47c35aef8f18f8da51fabc75781e542f85124810d
SHA512

8e84ca8303749abaed3d8dfdcf28d793b8f0e976c23756bae7770751b0f4741a00a932cc4fbae8e35ee439bf6eeb859bd799825fe08adbec2b5daede1141d8f2
SSDEEP

12288:i9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hG:OZ1xuVVjfFoynPaVBUR8f+kN10EBs

Score

10^/10

darkcomet àäìèí-ïê rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Àäìèí-ÏÊ

C2

127.0.0.1:1604

Mutex

DC_MUTEX-W9C9U90

Attributes

gencode
bRpFVVAWrSk3
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  f43e53cfd5f202f2da02f7d7e0d2f6ce_JaffaCakes118
- Size
  
  658KB
- MD5
  
  f43e53cfd5f202f2da02f7d7e0d2f6ce
- SHA1
  
  70be2900b10787c7ca354b64de4d0a0dab2f8b9f
- SHA256
  
  90e176841f0fc5bc2a02caf47c35aef8f18f8da51fabc75781e542f85124810d
- SHA512
  
  8e84ca8303749abaed3d8dfdcf28d793b8f0e976c23756bae7770751b0f4741a00a932cc4fbae8e35ee439bf6eeb859bd799825fe08adbec2b5daede1141d8f2
- SSDEEP
  
  12288:i9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hG:OZ1xuVVjfFoynPaVBUR8f+kN10EBs
Score

10^/10

darkcomet àäìèí-ïê rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

àäìèí-ïêdarkcomet

behavioral1

darkcometàäìèí-ïêrattrojan

behavioral2

darkcometàäìèí-ïêrattrojan