darkcomet | 56cdd8cd8c54b467746c7015676b24bdd79a39cb3fab3ea081cf7fda8cefa22b | Triage

Submit
Reports

Overview

overview

Static

static

fae5571441...18.exe

windows7-x64

fae5571441...18.exe

windows10-2004-x64

Sharing

General

Target

fae5571441a7473490b6c8b95a5c4235_JaffaCakes118
Size

689KB
Sample

240419-wza4rsbh24
MD5

fae5571441a7473490b6c8b95a5c4235
SHA1

eaf45c2b77c819aff6d8d1b697c9d49b11de39ce
SHA256

56cdd8cd8c54b467746c7015676b24bdd79a39cb3fab3ea081cf7fda8cefa22b
SHA512

d6427cf6594fc3cc377dbce80c50ad6e747ef0b4eb843345bc9ad8967feae5653b63c6830f906ba8965390c65a9c784696fa41b448c4bada3f7e84a4af72d7f3
SSDEEP

12288:Y9AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LqnKK:uAQ6Zx9cxTmOrucTIEFSpOG

Score

10^/10

darkcomet rat trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

fae5571441a7473490b6c8b95a5c4235_JaffaCakes118.exe

Resource

win7-20240221-en

darkcomet rat trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

fae5571441a7473490b6c8b95a5c4235_JaffaCakes118.exe

Resource

win10v2004-20240412-en

darkcomet rat trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  fae5571441a7473490b6c8b95a5c4235_JaffaCakes118
- Size
  
  689KB
- MD5
  
  fae5571441a7473490b6c8b95a5c4235
- SHA1
  
  eaf45c2b77c819aff6d8d1b697c9d49b11de39ce
- SHA256
  
  56cdd8cd8c54b467746c7015676b24bdd79a39cb3fab3ea081cf7fda8cefa22b
- SHA512
  
  d6427cf6594fc3cc377dbce80c50ad6e747ef0b4eb843345bc9ad8967feae5653b63c6830f906ba8965390c65a9c784696fa41b448c4bada3f7e84a4af72d7f3
- SSDEEP
  
  12288:Y9AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LqnKK:uAQ6Zx9cxTmOrucTIEFSpOG
Score

10^/10

darkcomet rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometrattrojan

behavioral2

darkcometrattrojan

© 2018-2024

Terms | Privacy