darkcomet | 7152136d62f1af1949999609d13c61685facc77142fc44bf02301bcb6a74277a | Triage

Submit
Reports

Overview

overview

Static

static

3

18f7c6b063...18.exe

windows7-x64

18f7c6b063...18.exe

windows10-2004-x64

Sharing

General

Target

18f7c6b0637fd8bb80a0ce049568a13f_JaffaCakes118
Size

541KB
Sample

241006-vqy9kazbnc
MD5

18f7c6b0637fd8bb80a0ce049568a13f
SHA1

9939dee26c79dc1629ba02a29d026eaaafa6dcc8
SHA256

7152136d62f1af1949999609d13c61685facc77142fc44bf02301bcb6a74277a
SHA512

99f2451fa36f2eeba4e5fc0b326f0ffd8ff480f7f3bba4e892f3c54257bc6320b950a279c9976dfd17d3b439fa75489f7b53abe574548994e02157c50f63ec76
SSDEEP

12288:5ZeVQkTrvj4Br8+b3+uj8374nrJYvHdN8KRg5BXjRXv2pEsjfhNcMvC:5wQkTf4dP18LgNC8D5Z9v2XrIqC

Score

10^/10

darkcomet discovery rat trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

18f7c6b0637fd8bb80a0ce049568a13f_JaffaCakes118.exe

Resource

win7-20240704-en

darkcomet discovery rat trojan upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

18f7c6b0637fd8bb80a0ce049568a13f_JaffaCakes118.exe

Resource

win10v2004-20240802-en

darkcomet discovery rat trojan upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  18f7c6b0637fd8bb80a0ce049568a13f_JaffaCakes118
- Size
  
  541KB
- MD5
  
  18f7c6b0637fd8bb80a0ce049568a13f
- SHA1
  
  9939dee26c79dc1629ba02a29d026eaaafa6dcc8
- SHA256
  
  7152136d62f1af1949999609d13c61685facc77142fc44bf02301bcb6a74277a
- SHA512
  
  99f2451fa36f2eeba4e5fc0b326f0ffd8ff480f7f3bba4e892f3c54257bc6320b950a279c9976dfd17d3b439fa75489f7b53abe574548994e02157c50f63ec76
- SSDEEP
  
  12288:5ZeVQkTrvj4Br8+b3+uj8374nrJYvHdN8KRg5BXjRXv2pEsjfhNcMvC:5wQkTf4dP18LgNC8D5Z9v2XrIqC
Score

10^/10

darkcomet discovery rat trojan upx
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojanupx

behavioral2

darkcometdiscoveryrattrojanupx

© 2018-2025

Terms | Privacy