darkcomet | 750d9a255af991980644487228a1b12d6cb4c00658ddaea56a12095503ba0616 | Triage

Submit
Reports

Overview

overview

Static

static

3

50a13a1890...18.exe

windows7-x64

50a13a1890...18.exe

windows10-2004-x64

3

Sharing

General

Target

50a13a18908241e61dc463c728726aa0_JaffaCakes118
Size

690KB
Sample

241017-elplka1fke
MD5

50a13a18908241e61dc463c728726aa0
SHA1

b7f0bf3a253e8eec466a135c35a1e1fb63247880
SHA256

750d9a255af991980644487228a1b12d6cb4c00658ddaea56a12095503ba0616
SHA512

d290b2317d9408fd84461b902f61350365b6da2746bee8bbae3c51ff1ef02101a343760ae20eafae7aca899755f1800014ca09c8926091c13df892ee74481cd9
SSDEEP

12288:17aN/Pb6UGZRX1VUltHrFfgMW4tIFZHQeV8L7eU9P4VnTNXXyqR8D6kZUHSYr2RW:iS2BFfgMWaegvd4BT8A+6MUHSYr2RW

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

50a13a18908241e61dc463c728726aa0_JaffaCakes118.exe

Resource

win7-20241010-en

darkcomet discovery rat trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

50a13a18908241e61dc463c728726aa0_JaffaCakes118.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  50a13a18908241e61dc463c728726aa0_JaffaCakes118
- Size
  
  690KB
- MD5
  
  50a13a18908241e61dc463c728726aa0
- SHA1
  
  b7f0bf3a253e8eec466a135c35a1e1fb63247880
- SHA256
  
  750d9a255af991980644487228a1b12d6cb4c00658ddaea56a12095503ba0616
- SHA512
  
  d290b2317d9408fd84461b902f61350365b6da2746bee8bbae3c51ff1ef02101a343760ae20eafae7aca899755f1800014ca09c8926091c13df892ee74481cd9
- SSDEEP
  
  12288:17aN/Pb6UGZRX1VUltHrFfgMW4tIFZHQeV8L7eU9P4VnTNXXyqR8D6kZUHSYr2RW:iS2BFfgMWaegvd4BT8A+6MUHSYr2RW
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

© 2018-2024

Terms | Privacy