darkcomet | ec69a281b147c21862d92706d78266fa98c4dedb0e39ced3d3cd9a86a3bea590 | Triage

Submit
Reports

Overview

overview

Static

static

6250f70627...18.exe

windows7-x64

6250f70627...18.exe

windows10-2004-x64

Sharing

General

Target

6250f70627980d469b2b76f6e0bccf36_JaffaCakes118
Size

658KB
Sample

241020-p1jnza1bmm
MD5

6250f70627980d469b2b76f6e0bccf36
SHA1

7d66296894ea752f9fe529bb9fe6ac5b1df4ce1c
SHA256

ec69a281b147c21862d92706d78266fa98c4dedb0e39ced3d3cd9a86a3bea590
SHA512

8897a33b6cb1da0092043d31a76ae6e41569ded1bc8709f6df090d06d674f9e009726a1b59a9a134ae92ea7308ddb492c4e8319fdb5741224cc25ed680d8ede5
SSDEEP

12288:B9AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LqnKS5L:3AQ6Zx9cxTmOrucTIEFSpOG/p

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6250f70627980d469b2b76f6e0bccf36_JaffaCakes118.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

6250f70627980d469b2b76f6e0bccf36_JaffaCakes118.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  6250f70627980d469b2b76f6e0bccf36_JaffaCakes118
- Size
  
  658KB
- MD5
  
  6250f70627980d469b2b76f6e0bccf36
- SHA1
  
  7d66296894ea752f9fe529bb9fe6ac5b1df4ce1c
- SHA256
  
  ec69a281b147c21862d92706d78266fa98c4dedb0e39ced3d3cd9a86a3bea590
- SHA512
  
  8897a33b6cb1da0092043d31a76ae6e41569ded1bc8709f6df090d06d674f9e009726a1b59a9a134ae92ea7308ddb492c4e8319fdb5741224cc25ed680d8ede5
- SSDEEP
  
  12288:B9AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LqnKS5L:3AQ6Zx9cxTmOrucTIEFSpOG/p
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

darkcometdiscoveryrattrojan

© 2018-2024

Terms | Privacy