General

  • Target

    jdhfdshdk.bat

  • Size

    756KB

  • Sample

    240810-ssnvhazald

  • MD5

    855fdcbb7f2b26216324afbd36d8b8b3

  • SHA1

    b02b1ad03a4becd3f96b1e54e75a1eb8fbdd1e5e

  • SHA256

    cebc3aaa8f0b183d42fa6e52020c2effaf73d997e6a095ef2e8a43c1e2dba3eb

  • SHA512

    cde8d4887259b61a5e4479cdc1898a6508e902a690d9b38008f952408ace0eb3762aafc3b998571f11902b2db2ff0593edaee4400e302c83836fb6992cb57e69

  • SSDEEP

    12288:t9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hN:HZ1xuVVjfFoynPaVBUR8f+kN10EBD

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-47YCESL

Attributes
  • gencode

    aL2JzXvVx9mA

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      jdhfdshdk.bat

    • Size

      756KB

    • MD5

      855fdcbb7f2b26216324afbd36d8b8b3

    • SHA1

      b02b1ad03a4becd3f96b1e54e75a1eb8fbdd1e5e

    • SHA256

      cebc3aaa8f0b183d42fa6e52020c2effaf73d997e6a095ef2e8a43c1e2dba3eb

    • SHA512

      cde8d4887259b61a5e4479cdc1898a6508e902a690d9b38008f952408ace0eb3762aafc3b998571f11902b2db2ff0593edaee4400e302c83836fb6992cb57e69

    • SSDEEP

      12288:t9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hN:HZ1xuVVjfFoynPaVBUR8f+kN10EBD

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

MITRE ATT&CK Enterprise v15

Tasks