darkcomet | ef50d205665a80d0eb8e74f8ccd409502cfe13d6658efd1c3b593a7c6d7a3eab | Triage

Sharing

General

Target

62f17e42e40ef731f7997f09d387ea3c_JaffaCakes118
Size

556KB
Sample

241020-ss225axbqr
MD5

62f17e42e40ef731f7997f09d387ea3c
SHA1

65de51fc088ac3ca3a64b6aa0ad090168d1720d0
SHA256

ef50d205665a80d0eb8e74f8ccd409502cfe13d6658efd1c3b593a7c6d7a3eab
SHA512

b746a1068d97a91b4e460b14b992251a4706bf5f5e2332bfc77aaec0169840d35f7fb265835c85b4c74a38c3ce411aedc6de2add4951b80aecae1370cdcf2a8a
SSDEEP

12288:GMuOLl1rkHbSuPpjrYIOdHTPbZY/KArakBo9aFyX:GMuul1SbSyjrYnz9YC0ueyX

Score

10^/10

darkcomet discovery evasion rat trojan

Malware Config

Targets

- Target
  
  62f17e42e40ef731f7997f09d387ea3c_JaffaCakes118
- Size
  
  556KB
- MD5
  
  62f17e42e40ef731f7997f09d387ea3c
- SHA1
  
  65de51fc088ac3ca3a64b6aa0ad090168d1720d0
- SHA256
  
  ef50d205665a80d0eb8e74f8ccd409502cfe13d6658efd1c3b593a7c6d7a3eab
- SHA512
  
  b746a1068d97a91b4e460b14b992251a4706bf5f5e2332bfc77aaec0169840d35f7fb265835c85b4c74a38c3ce411aedc6de2add4951b80aecae1370cdcf2a8a
- SSDEEP
  
  12288:GMuOLl1rkHbSuPpjrYIOdHTPbZY/KArakBo9aFyX:GMuul1SbSyjrYnz9YC0ueyX
Score

10^/10

darkcomet discovery evasion rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryevasionrattrojan

behavioral2

darkcometdiscoveryevasionrattrojan