Overview

overview

10

Static

static

10

5b8bcbe274...18.exe

windows7-x64

10

5b8bcbe274...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b8bcbe274f61685651cb6531b97cff0_JaffaCakes118

  • Size

    756KB

  • Sample

    240519-z9h4xaaf9z

  • MD5

    5b8bcbe274f61685651cb6531b97cff0

  • SHA1

    1da88984536a0bb2564b992b44fc70d79bebf1ab

  • SHA256

    9e50a70c88dbd95315dc29fed727a95f661ee726713f164331c05eb402570d5e

  • SHA512

    4826e01e1c8f42921866ab7a47432fecba6db02098fa315c04d45558162ca8fa69f7d347cd6f0ded08953225c221f1b8df195f1644272c9549b6f426a0ad896a

  • SSDEEP

    12288:r9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h6bZRK:lZ1xuVVjfFoynPaVBUR8f+kN10EB2ZRK

Score
10/10
darkcometguest16rattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-N5SDY2F

Attributes
  • gencode

    DiAWCkcfySvM

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      5b8bcbe274f61685651cb6531b97cff0_JaffaCakes118

    • Size

      756KB

    • MD5

      5b8bcbe274f61685651cb6531b97cff0

    • SHA1

      1da88984536a0bb2564b992b44fc70d79bebf1ab

    • SHA256

      9e50a70c88dbd95315dc29fed727a95f661ee726713f164331c05eb402570d5e

    • SHA512

      4826e01e1c8f42921866ab7a47432fecba6db02098fa315c04d45558162ca8fa69f7d347cd6f0ded08953225c221f1b8df195f1644272c9549b6f426a0ad896a

    • SSDEEP

      12288:r9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h6bZRK:lZ1xuVVjfFoynPaVBUR8f+kN10EB2ZRK

    Score
    10/10
    darkcometguest16rattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks