darkcomet | b0bf68b775f577180fa1f332b0fa7aba1ae4316c87059b8821498b5f193b1096 | Triage

Submit
Reports

Overview

overview

Static

static

6f1b7f65d3...18.exe

windows7-x64

6f1b7f65d3...18.exe

windows10-2004-x64

Sharing

General

Target

6f1b7f65d3c0a03bc506124be30421c1_JaffaCakes118
Size

232KB
Sample

241023-qg9aysteqn
MD5

6f1b7f65d3c0a03bc506124be30421c1
SHA1

87946f9411532b5661d92a99db5d838277ddea90
SHA256

b0bf68b775f577180fa1f332b0fa7aba1ae4316c87059b8821498b5f193b1096
SHA512

7e2b3350555fc7a1c7dd6554f8228360ba05bf3cb12c38fb2b58ac93fef6d01e0f18e0344c9a69d693d3bc29776dcaf4056b135760270ddcdce3f9adfe316ff8
SSDEEP

6144:O4CFfifD2gVKVTQQ249HZ52KTh9XKOCgLJacj5/AZtRsf:OXgr8VMQDT52WXKq9fj5/AZjs

Score

10^/10

darkcomet discovery rat trojan upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

6f1b7f65d3c0a03bc506124be30421c1_JaffaCakes118.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

6f1b7f65d3c0a03bc506124be30421c1_JaffaCakes118.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  6f1b7f65d3c0a03bc506124be30421c1_JaffaCakes118
- Size
  
  232KB
- MD5
  
  6f1b7f65d3c0a03bc506124be30421c1
- SHA1
  
  87946f9411532b5661d92a99db5d838277ddea90
- SHA256
  
  b0bf68b775f577180fa1f332b0fa7aba1ae4316c87059b8821498b5f193b1096
- SHA512
  
  7e2b3350555fc7a1c7dd6554f8228360ba05bf3cb12c38fb2b58ac93fef6d01e0f18e0344c9a69d693d3bc29776dcaf4056b135760270ddcdce3f9adfe316ff8
- SSDEEP
  
  6144:O4CFfifD2gVKVTQQ249HZ52KTh9XKOCgLJacj5/AZtRsf:OXgr8VMQDT52WXKq9fj5/AZjs
Score

10^/10

darkcomet discovery rat trojan upx
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojanupx

behavioral2

darkcometdiscoveryrattrojanupx

© 2018-2024

Terms | Privacy