Overview

overview

10

Static

static

10

Darkcomet ...ty.exe

windows7-x64

1

Darkcomet ...ty.exe

windows10-2004-x64

1

Darkcomet ...et.exe

windows7-x64

10

Darkcomet ...et.exe

windows10-2004-x64

10

Darkcomet ...er.exe

windows7-x64

1

Darkcomet ...er.exe

windows10-2004-x64

1

Darkcomet ...e3.dll

windows7-x64

3

Darkcomet ...e3.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abef83a4ead4d18c354f98d7e72312f1_JaffaCakes118

  • Size

    14.6MB

  • Sample

    240614-27lhcszepg

  • MD5

    abef83a4ead4d18c354f98d7e72312f1

  • SHA1

    21e1ce0fa9013534af2a27c6d8fd0798e1028128

  • SHA256

    86ffdda11652f7e00c5fc21eb9f2e97cad4453b5e467501bb1207d3ebb7781ea

  • SHA512

    9145e554f98f8dc66435bd468b6cc064f1f1ea73aafabbb61ec9ed1cb4d6744f22e01f69ac3ed2fd2a3a0c4bb2a50ef658c1d9564f1eaee1848c7f5392742010

  • SSDEEP

    393216:JuSX8qh5hu/OYnJ8jEMA/DTdfsuc1RzGCxi:JdX8qh5oVnJ8j/wDTdEKCxi

Score
10/10
darkcometrattrojan

Malware Config

Targets

    • Target

      Darkcomet RAT 5.3.1/Celesty Binder/Celesty.exe

    • Size

      2.7MB

    • MD5

      c3009ee63bc661d9ea75eaeb256448ca

    • SHA1

      45eb01150756df432e25eed44d976442473356de

    • SHA256

      0bb88564a22bfd6d9ad6e4d8efa9077792a7b6094c2a0f865d70c43e11507352

    • SHA512

      96f5847fbeef95df1309e97a4bc3d786a5f5c19b87e804f12d88b4473a0b50291c40407a3d95a2d5d78031f03be76da47f1846a73c7802ddae46a38ac4634e67

    • SSDEEP

      49152:vOY/SiSf6KSIshmgTlxRQv9rn0KtX2pyJz0qGoy/:tKZshhYv9ptXZJe/

    Score
    1/10
    behavioral1behavioral2

    • Target

      Darkcomet RAT 5.3.1/DarkComet.exe

    • Size

      11.3MB

    • MD5

      d761f3aa64064a706a521ba14d0f8741

    • SHA1

      ab7382bcfdf494d0327fccce9c884592bcc1adeb

    • SHA256

      21ca06b18698d14154a45822aaae1e3837d168cc7630bcd3ec3d8c68aaa959e6

    • SHA512

      d2274c03f805a5cd62104492e154fc225c3f6997091accb2f4bff165308fc82ba0d9adf185ec744222bcb4ece08d1ba754a35a2d88c10c5743f4d2e66494377f

    • SSDEEP

      196608:TPvqxSrDTVokQwhM/kSEMTQINokXJw7lW740VeqQPR:LCxSrFokQw2NjUYuWU0t

    Score
    10/10
    darkcometrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral3behavioral4

    • Target

      Darkcomet RAT 5.3.1/Spoof extensions/Spoofer.exe

    • Size

      2.0MB

    • MD5

      894b256f41dc579a5b32828ed2f7e3db

    • SHA1

      06fa1a4dd30780e404c8f2e7a615fd54d6f2ae68

    • SHA256

      12dbd354b4cc073ea7f80cc0d74bd96118362e9c120df7800cf0f9e863569f98

    • SHA512

      bede5a2c6e87ac6d432903109cca97fcbf60fdba082ba137a04c6ca6490a548f20910b6560821816b76744235fa19f5fcbe256c1ad9b87c2c1b8b20e5c5ac409

    • SSDEEP

      24576:cuAzSWYlsCSe+I3n6HgjigeCNOu6kpBiSSgmq8uWYkzJy90qeHqywdbMQTTRwQ+0:KU1Zp6kpkSSgmSWJyqqe3wdbBTubz

    Score
    1/10
    behavioral5behavioral6

    • Target

      Darkcomet RAT 5.3.1/sqlite3.dll

    • Size

      510KB

    • MD5

      d3979db259f55d59b4edb327673c1905

    • SHA1

      0697e8f35b5951c61a3a632d74fd96843c941628

    • SHA256

      043e5570299c6099756c1809c5632eabeab95ed3c1a55c86843c0ec218940e5a

    • SHA512

      0b87c89aafd3e627c7d6bed0b833601fea1917a76a972061f32a2d9e4aa2e9e85b5e8a67cb330ca44aff17915d0fe2793798451a109d3f0b5014eed06b73bb45

    • SSDEEP

      12288:eiTjR6kna/KzsHIoufPiL5JXjKaarzWovTSmja9q96fQkw8dw:em8NCzsooOPiXT6rSov2mjVw3w

    Score
    3/10
    behavioral7behavioral8

MITRE ATT&CK Matrix ATT&CK v13

Tasks