darkcomet | 216821c0911af6d939d017b931c89246ac762166ff10af7cb7fefc44d62a2176 | Triage

Submit
Reports

Overview

overview

Static

static

7

f7b7d5a0eb...18.exe

windows7-x64

f7b7d5a0eb...18.exe

windows10-2004-x64

Sharing

General

Target

f7b7d5a0ebbea4b5f999877082af2dbf_JaffaCakes118
Size

365KB
Sample

240418-lgv14sad7w
MD5

f7b7d5a0ebbea4b5f999877082af2dbf
SHA1

d9727e3bdca2c0a5efd7355361acc71c6b00a521
SHA256

216821c0911af6d939d017b931c89246ac762166ff10af7cb7fefc44d62a2176
SHA512

5b7770b83c7c9b8529324274d6fedc4b7bc39d538d084dc665422a6303e5460e36f45ac1ea67fb94a080fed60cf7a27d9f32c539c13a6e4b9c70f010b2096767
SSDEEP

6144:mocMD9L6Ro5oso1IwJs3mb6plI/7SCirAsZgWmiF:mtMDF6RomTGwJd64uC26C

Score

10^/10

darkcomet aspackv2 rat trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

f7b7d5a0ebbea4b5f999877082af2dbf_JaffaCakes118.exe

Resource

win7-20240221-en

darkcomet rat trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

f7b7d5a0ebbea4b5f999877082af2dbf_JaffaCakes118.exe

Resource

win10v2004-20240412-en

darkcomet rat trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  f7b7d5a0ebbea4b5f999877082af2dbf_JaffaCakes118
- Size
  
  365KB
- MD5
  
  f7b7d5a0ebbea4b5f999877082af2dbf
- SHA1
  
  d9727e3bdca2c0a5efd7355361acc71c6b00a521
- SHA256
  
  216821c0911af6d939d017b931c89246ac762166ff10af7cb7fefc44d62a2176
- SHA512
  
  5b7770b83c7c9b8529324274d6fedc4b7bc39d538d084dc665422a6303e5460e36f45ac1ea67fb94a080fed60cf7a27d9f32c539c13a6e4b9c70f010b2096767
- SSDEEP
  
  6144:mocMD9L6Ro5oso1IwJs3mb6plI/7SCirAsZgWmiF:mtMDF6RomTGwJd64uC26C
Score

10^/10

darkcomet rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometrattrojan

behavioral2

darkcometrattrojan

© 2018-2024

Terms | Privacy