darkcomet | 1d0bdc71cb6159db641ba605621dbd6ac9301215990142584b7623f7aeb14053 | Triage

Submit
Reports

Overview

overview

Static

static

fe7de8fa98...18.exe

windows7-x64

fe7de8fa98...18.exe

windows10-2004-x64

Sharing

General

Target

fe7de8fa98e0fee2a6e49375eaa12cba_JaffaCakes118
Size

647KB
Sample

240421-fpa31sca34
MD5

fe7de8fa98e0fee2a6e49375eaa12cba
SHA1

5bfdd41856cf8d9bde1afc76e7ab6d1778bb5703
SHA256

1d0bdc71cb6159db641ba605621dbd6ac9301215990142584b7623f7aeb14053
SHA512

659e6b3055acb7b641841fd38ac81ffba6c7cbe28802b4a3bedd6c928fe2840e06eccc57145d9e86e8b47f804f8c2c40fcceabbf870c66eceb36be30ae6a0cf3
SSDEEP

12288:OpwABK90BOe/x9lPAYvxPQVjdsAY2XjWlnlpTMMXG91uhKIbPgC:4wAcu99lPzvxP+Bsz2XjWTRMQckkIbP

Score

10^/10

darkcomet rat trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

fe7de8fa98e0fee2a6e49375eaa12cba_JaffaCakes118.exe

Resource

win7-20240221-en

darkcomet rat trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

fe7de8fa98e0fee2a6e49375eaa12cba_JaffaCakes118.exe

Resource

win10v2004-20240412-en

darkcomet rat trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  fe7de8fa98e0fee2a6e49375eaa12cba_JaffaCakes118
- Size
  
  647KB
- MD5
  
  fe7de8fa98e0fee2a6e49375eaa12cba
- SHA1
  
  5bfdd41856cf8d9bde1afc76e7ab6d1778bb5703
- SHA256
  
  1d0bdc71cb6159db641ba605621dbd6ac9301215990142584b7623f7aeb14053
- SHA512
  
  659e6b3055acb7b641841fd38ac81ffba6c7cbe28802b4a3bedd6c928fe2840e06eccc57145d9e86e8b47f804f8c2c40fcceabbf870c66eceb36be30ae6a0cf3
- SSDEEP
  
  12288:OpwABK90BOe/x9lPAYvxPQVjdsAY2XjWlnlpTMMXG91uhKIbPgC:4wAcu99lPzvxP+Bsz2XjWTRMQckkIbP
Score

10^/10

darkcomet rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometrattrojan

behavioral2

darkcometrattrojan

© 2018-2024

Terms | Privacy