darkcomet | ad50523e5dc4b845b176cd8cc8d45674f5d73d82e4540dd09c96253bca2008b2 | Triage

Sharing

General

Target

6e14819cf225ee67f80b0c78bffc9cf1_JaffaCakes118
Size

658KB
Sample

241023-k3n91s1fre
MD5

6e14819cf225ee67f80b0c78bffc9cf1
SHA1

b37b726611bc5deadb670ac59d123dadcc62c4d9
SHA256

ad50523e5dc4b845b176cd8cc8d45674f5d73d82e4540dd09c96253bca2008b2
SHA512

dbe946875d4a2353cef66ddf4ed9dedd4472ed776c291d5ea091dcc548da25a6cdeeb2de1709bad6f0bf65e40435f8b647e7b15700559bf0bef9d629a1dd5221
SSDEEP

12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hH:GZ1xuVVjfFoynPaVBUR8f+kN10EBR

Score

10^/10

darkcomet guest16 discovery rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

tmoney33.no-ip.biz:200

Mutex

DC_MUTEX-LP7W534

Attributes

gencode
FewkFSwchKca
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  6e14819cf225ee67f80b0c78bffc9cf1_JaffaCakes118
- Size
  
  658KB
- MD5
  
  6e14819cf225ee67f80b0c78bffc9cf1
- SHA1
  
  b37b726611bc5deadb670ac59d123dadcc62c4d9
- SHA256
  
  ad50523e5dc4b845b176cd8cc8d45674f5d73d82e4540dd09c96253bca2008b2
- SHA512
  
  dbe946875d4a2353cef66ddf4ed9dedd4472ed776c291d5ea091dcc548da25a6cdeeb2de1709bad6f0bf65e40435f8b647e7b15700559bf0bef9d629a1dd5221
- SSDEEP
  
  12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hH:GZ1xuVVjfFoynPaVBUR8f+kN10EBR
Score

10^/10

darkcomet guest16 discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

guest16darkcomet

behavioral1

darkcometguest16discoveryrattrojan

behavioral2

darkcometguest16discoveryrattrojan