darkcomet | 6efce9cc3c3adc904505286cd2e7ebff39682a0f08ae240b086204d120455312 | Triage

Sharing

General

Target

06e125132b458321f97b6409a4db9ac4_JaffaCakes118
Size

744KB
Sample

240620-rx7mqssejh
MD5

06e125132b458321f97b6409a4db9ac4
SHA1

7d0f1f4c71acab1e8766db853541ce5744c31eac
SHA256

6efce9cc3c3adc904505286cd2e7ebff39682a0f08ae240b086204d120455312
SHA512

dde09ccdde5317d628e7498ff44031ae44c87e9c836b4fa984a249991c25e55c56c03d8a0e4cd22382344d10487b4806115cb6f785eb2c5fea18b287a813ef40
SSDEEP

12288:Yfbh3edoSdPDze9LBApPsKNoeP313umLcUmyqC+D/:CR8oYzS12PVaA3LLRHqC+z

Score

10^/10

darkcomet evasion rat trojan

Malware Config

Targets

- Target
  
  06e125132b458321f97b6409a4db9ac4_JaffaCakes118
- Size
  
  744KB
- MD5
  
  06e125132b458321f97b6409a4db9ac4
- SHA1
  
  7d0f1f4c71acab1e8766db853541ce5744c31eac
- SHA256
  
  6efce9cc3c3adc904505286cd2e7ebff39682a0f08ae240b086204d120455312
- SHA512
  
  dde09ccdde5317d628e7498ff44031ae44c87e9c836b4fa984a249991c25e55c56c03d8a0e4cd22382344d10487b4806115cb6f785eb2c5fea18b287a813ef40
- SSDEEP
  
  12288:Yfbh3edoSdPDze9LBApPsKNoeP313umLcUmyqC+D/:CR8oYzS12PVaA3LLRHqC+z
Score

10^/10

darkcomet evasion rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometevasionrattrojan

behavioral2

darkcometevasionrattrojan