darkcomet | 36b6cd1a1390a427bf88c15c700e5f5705c54d0978b9671f5b3ce3ecf996b854 | Triage

Sharing

General

Target

675fb5757f79bdaab93769657d3018ae_JaffaCakes118
Size

689KB
Sample

240522-qgtkhacf42
MD5

675fb5757f79bdaab93769657d3018ae
SHA1

a048c334450fa9f8b3dde6f05aa802d88401d415
SHA256

36b6cd1a1390a427bf88c15c700e5f5705c54d0978b9671f5b3ce3ecf996b854
SHA512

6709ec16f23e628e67d0bfda632d6700f5d5d44f4b9bcc1a07c1364a0c66cb4e5edc831b1e9c29c7c89b29f3c6aead57a568c23f5fe0b7780107519678c902b3
SSDEEP

12288:i9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFWW:OiBIGkbxqEcjsWiDxguehC2S6

Score

10^/10

darkcomet guest16 rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

185.34.183.6:6666

Mutex

DC_MUTEX-ZNDUWHP

Attributes

gencode
oVPEveeud2Hd
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  675fb5757f79bdaab93769657d3018ae_JaffaCakes118
- Size
  
  689KB
- MD5
  
  675fb5757f79bdaab93769657d3018ae
- SHA1
  
  a048c334450fa9f8b3dde6f05aa802d88401d415
- SHA256
  
  36b6cd1a1390a427bf88c15c700e5f5705c54d0978b9671f5b3ce3ecf996b854
- SHA512
  
  6709ec16f23e628e67d0bfda632d6700f5d5d44f4b9bcc1a07c1364a0c66cb4e5edc831b1e9c29c7c89b29f3c6aead57a568c23f5fe0b7780107519678c902b3
- SSDEEP
  
  12288:i9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFWW:OiBIGkbxqEcjsWiDxguehC2S6
Score

10^/10

darkcomet guest16 rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

guest16darkcomet

behavioral1

darkcometguest16rattrojan

behavioral2

darkcometguest16rattrojan