darkcomet | 9b4382d2ea8d9c5a5bbf6c3c05c9de59e1212f57a67bd40ca9668ab254ee81a8 | Triage

Sharing

General

Target

6889b1b6df32261a5c1e628a6ec2fe02_JaffaCakes118
Size

689KB
Sample

240522-zczemafg34
MD5

6889b1b6df32261a5c1e628a6ec2fe02
SHA1

bb3fbafd179b527e56ced7df45b39584cfabc621
SHA256

9b4382d2ea8d9c5a5bbf6c3c05c9de59e1212f57a67bd40ca9668ab254ee81a8
SHA512

c46f658ce9d821ea879db9e59810383a46bf18c155e3ed20e4bcf40110eb0d6ce55cb2b1b12b399f7a24a59c495baf942e4e6546ea320c1bdd174731dba79552
SSDEEP

12288:S9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyF8v:+iBIGkbxqEcjsWiDxguehC2S5

Score

10^/10

darkcomet guest16 rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-X77M02X

Attributes

gencode
nN8vSHrhrc2i
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  6889b1b6df32261a5c1e628a6ec2fe02_JaffaCakes118
- Size
  
  689KB
- MD5
  
  6889b1b6df32261a5c1e628a6ec2fe02
- SHA1
  
  bb3fbafd179b527e56ced7df45b39584cfabc621
- SHA256
  
  9b4382d2ea8d9c5a5bbf6c3c05c9de59e1212f57a67bd40ca9668ab254ee81a8
- SHA512
  
  c46f658ce9d821ea879db9e59810383a46bf18c155e3ed20e4bcf40110eb0d6ce55cb2b1b12b399f7a24a59c495baf942e4e6546ea320c1bdd174731dba79552
- SSDEEP
  
  12288:S9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyF8v:+iBIGkbxqEcjsWiDxguehC2S5
Score

10^/10

darkcomet guest16 rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

guest16darkcomet

behavioral1

darkcometguest16rattrojan

behavioral2

darkcometguest16rattrojan