darkcomet | 8e87d099abd3045dd5748d353f875e384a097c496a35a93eabf3b1f27ee74c20 | Triage

Submit
Reports

Overview

overview

Static

static

6aa15de6cb...18.exe

windows7-x64

6aa15de6cb...18.exe

windows10-2004-x64

Sharing

General

Target

6aa15de6cbb7ea4a1b6a938dd99bf735_JaffaCakes118
Size

861KB
Sample

241022-qg5yjawgrb
MD5

6aa15de6cbb7ea4a1b6a938dd99bf735
SHA1

04b638350c790f1a4d7cbf6c9f6b665f1b93d01f
SHA256

8e87d099abd3045dd5748d353f875e384a097c496a35a93eabf3b1f27ee74c20
SHA512

9f98535b09fbd9af82bbd60b89896e879b973b99e7be7c9eb82cd1f8fb8f1791bfb696983fd2e76feb770a2180370d8a3df0ad794039c680c235018bd8c649b0
SSDEEP

12288:waAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdZhO4V:BAEENIq8XwyVPQclDq/+WnpsSZ1

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6aa15de6cbb7ea4a1b6a938dd99bf735_JaffaCakes118.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

6aa15de6cbb7ea4a1b6a938dd99bf735_JaffaCakes118.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  6aa15de6cbb7ea4a1b6a938dd99bf735_JaffaCakes118
- Size
  
  861KB
- MD5
  
  6aa15de6cbb7ea4a1b6a938dd99bf735
- SHA1
  
  04b638350c790f1a4d7cbf6c9f6b665f1b93d01f
- SHA256
  
  8e87d099abd3045dd5748d353f875e384a097c496a35a93eabf3b1f27ee74c20
- SHA512
  
  9f98535b09fbd9af82bbd60b89896e879b973b99e7be7c9eb82cd1f8fb8f1791bfb696983fd2e76feb770a2180370d8a3df0ad794039c680c235018bd8c649b0
- SSDEEP
  
  12288:waAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdZhO4V:BAEENIq8XwyVPQclDq/+WnpsSZ1
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

darkcometdiscoveryrattrojan

© 2018-2024

Terms | Privacy