darkcomet | cc1784d8f2fea6c68a03fc1ad52c8ebdd4516fbb231911be31160eac06245d1f | Triage

Sharing

General

Target

1d07e763334e037de27880e3fbd8d6d5_JaffaCakes118
Size

658KB
Sample

241007-mxd8za1ejn
MD5

1d07e763334e037de27880e3fbd8d6d5
SHA1

44766450e2f83dea0ab69e81350ad9588ed79918
SHA256

cc1784d8f2fea6c68a03fc1ad52c8ebdd4516fbb231911be31160eac06245d1f
SHA512

58e8957982c8ee08662068d193e2c6615ec79facf37e243963fe0fa967aef400c9222b5b28a06339ec68fd07a780b46899677c98dc5a03cd0b5435e7a7a50793
SSDEEP

12288:i9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hl:OZ1xuVVjfFoynPaVBUR8f+kN10EBv

Score

10^/10

darkcomet guest16 discovery rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

77.0.82.214:1604

Mutex

DC_MUTEX-ZMR6BJ1

Attributes

gencode
jip5BD5JUR5T
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  1d07e763334e037de27880e3fbd8d6d5_JaffaCakes118
- Size
  
  658KB
- MD5
  
  1d07e763334e037de27880e3fbd8d6d5
- SHA1
  
  44766450e2f83dea0ab69e81350ad9588ed79918
- SHA256
  
  cc1784d8f2fea6c68a03fc1ad52c8ebdd4516fbb231911be31160eac06245d1f
- SHA512
  
  58e8957982c8ee08662068d193e2c6615ec79facf37e243963fe0fa967aef400c9222b5b28a06339ec68fd07a780b46899677c98dc5a03cd0b5435e7a7a50793
- SSDEEP
  
  12288:i9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hl:OZ1xuVVjfFoynPaVBUR8f+kN10EBv
Score

10^/10

darkcomet guest16 discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

guest16darkcomet

behavioral1

darkcometguest16discoveryrattrojan

behavioral2

darkcometguest16discoveryrattrojan