darkcomet | f41dc16424371e12081ded51a4bef7c526ca9c2d7ac9daae3d67a100ee8ee12a | Triage

Sharing

General

Target

5eb22126ba1fc63baa23c6ed77ce3f08_JaffaCakes118
Size

689KB
Sample

240520-mznkesgc43
MD5

5eb22126ba1fc63baa23c6ed77ce3f08
SHA1

00d875f2e724ab5d567f428aa4226937f00700d3
SHA256

f41dc16424371e12081ded51a4bef7c526ca9c2d7ac9daae3d67a100ee8ee12a
SHA512

1d22fb1b4d5a915c496867798b6c6baecbba76ec0ef0f351c151f5296d0e6ccb325b0a5312c5a12952bc9cc8291ffd742d2cc70cd138dfac236bd31fed76b524
SSDEEP

12288:S9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyF8g:+iBIGkbxqEcjsWiDxguehC2SO

Score

10^/10

darkcomet guest16 rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-RXG6NWF

Attributes

gencode
f7Df6C4mwvJX
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  5eb22126ba1fc63baa23c6ed77ce3f08_JaffaCakes118
- Size
  
  689KB
- MD5
  
  5eb22126ba1fc63baa23c6ed77ce3f08
- SHA1
  
  00d875f2e724ab5d567f428aa4226937f00700d3
- SHA256
  
  f41dc16424371e12081ded51a4bef7c526ca9c2d7ac9daae3d67a100ee8ee12a
- SHA512
  
  1d22fb1b4d5a915c496867798b6c6baecbba76ec0ef0f351c151f5296d0e6ccb325b0a5312c5a12952bc9cc8291ffd742d2cc70cd138dfac236bd31fed76b524
- SSDEEP
  
  12288:S9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyF8g:+iBIGkbxqEcjsWiDxguehC2SO
Score

10^/10

darkcomet guest16 rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

guest16darkcomet

behavioral1

darkcometguest16rattrojan

behavioral2

darkcometguest16rattrojan