Overview

overview

10

Static

static

10

Darkcomet ...ty.exe

windows7-x64

3

Darkcomet ...ty.exe

windows10-ltsc 2021-x64

3

Darkcomet ...ty.exe

windows11-21h2-x64

3

Darkcomet ...et.exe

windows7-x64

10

Darkcomet ...et.exe

windows10-ltsc 2021-x64

10

Darkcomet ...et.exe

windows11-21h2-x64

10

Darkcomet ...er.exe

windows7-x64

3

Darkcomet ...er.exe

windows10-ltsc 2021-x64

3

Darkcomet ...er.exe

windows11-21h2-x64

3

Darkcomet ...e3.dll

windows7-x64

3

Darkcomet ...e3.dll

windows10-ltsc 2021-x64

3

Darkcomet ...e3.dll

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Darkcomet RAT 5.3.1.zip

  • Size

    14.6MB

  • Sample

    241027-jmej7stmgt

  • MD5

    9f9347ecf2cc6541fb64acd6fc0a5749

  • SHA1

    6c0d454ec2068d1c7d502a167ca02c8dafd0b244

  • SHA256

    bfe9a76229e6e502b7c542007cd976dd3b5e0d26190cdf7cc8a5e5aab0a63f7d

  • SHA512

    f0367a7c7265d38e52936bac40e0a18236d6544827da7dcdd1f2b19d2d3193b0039f5860a61a30f4e28bca3d2ef06a9c51f1b2c7f05927fad6ba37741ff015f3

  • SSDEEP

    393216:Yia1rsEqp8mxBktqBEH3JM/qbxhbRLEJt5RXtW3hg:Yl1rsEqJxChH3coxhbePK3hg

Score
10/10
darkcometdiscoveryrattrojanupx

Malware Config

Targets

    • Target

      Darkcomet RAT 5.3.1/Celesty Binder/Celesty.exe

    • Size

      2.7MB

    • MD5

      c3009ee63bc661d9ea75eaeb256448ca

    • SHA1

      45eb01150756df432e25eed44d976442473356de

    • SHA256

      0bb88564a22bfd6d9ad6e4d8efa9077792a7b6094c2a0f865d70c43e11507352

    • SHA512

      96f5847fbeef95df1309e97a4bc3d786a5f5c19b87e804f12d88b4473a0b50291c40407a3d95a2d5d78031f03be76da47f1846a73c7802ddae46a38ac4634e67

    • SSDEEP

      49152:vOY/SiSf6KSIshmgTlxRQv9rn0KtX2pyJz0qGoy/:tKZshhYv9ptXZJe/

    Score
    3/10
    discovery
    behavioral1behavioral2behavioral3

    • Target

      Darkcomet RAT 5.3.1/DarkComet.exe

    • Size

      11.3MB

    • MD5

      d761f3aa64064a706a521ba14d0f8741

    • SHA1

      ab7382bcfdf494d0327fccce9c884592bcc1adeb

    • SHA256

      21ca06b18698d14154a45822aaae1e3837d168cc7630bcd3ec3d8c68aaa959e6

    • SHA512

      d2274c03f805a5cd62104492e154fc225c3f6997091accb2f4bff165308fc82ba0d9adf185ec744222bcb4ece08d1ba754a35a2d88c10c5743f4d2e66494377f

    • SSDEEP

      196608:TPvqxSrDTVokQwhM/kSEMTQINokXJw7lW740VeqQPR:LCxSrFokQw2NjUYuWU0t

    Score
    10/10
    darkcometdiscoveryrattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral4behavioral5behavioral6

    • Target

      Darkcomet RAT 5.3.1/Spoof extensions/Spoofer.exe

    • Size

      2.0MB

    • MD5

      894b256f41dc579a5b32828ed2f7e3db

    • SHA1

      06fa1a4dd30780e404c8f2e7a615fd54d6f2ae68

    • SHA256

      12dbd354b4cc073ea7f80cc0d74bd96118362e9c120df7800cf0f9e863569f98

    • SHA512

      bede5a2c6e87ac6d432903109cca97fcbf60fdba082ba137a04c6ca6490a548f20910b6560821816b76744235fa19f5fcbe256c1ad9b87c2c1b8b20e5c5ac409

    • SSDEEP

      24576:cuAzSWYlsCSe+I3n6HgjigeCNOu6kpBiSSgmq8uWYkzJy90qeHqywdbMQTTRwQ+0:KU1Zp6kpkSSgmSWJyqqe3wdbBTubz

    Score
    3/10
    discovery
    behavioral7behavioral8behavioral9

    • Target

      Darkcomet RAT 5.3.1/sqlite3.dll

    • Size

      510KB

    • MD5

      d3979db259f55d59b4edb327673c1905

    • SHA1

      0697e8f35b5951c61a3a632d74fd96843c941628

    • SHA256

      043e5570299c6099756c1809c5632eabeab95ed3c1a55c86843c0ec218940e5a

    • SHA512

      0b87c89aafd3e627c7d6bed0b833601fea1917a76a972061f32a2d9e4aa2e9e85b5e8a67cb330ca44aff17915d0fe2793798451a109d3f0b5014eed06b73bb45

    • SSDEEP

      12288:eiTjR6kna/KzsHIoufPiL5JXjKaarzWovTSmja9q96fQkw8dw:em8NCzsooOPiXT6rSov2mjVw3w

    Score
    3/10
    discovery
    behavioral10behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks