darkcomet | 61b0875321fd4ee0cfc5096691dfa3ffeec7f4f893d1a712dc50b736cc7dc38a | Triage

Sharing

General

Target

80b102573a985be37f1eadbbb7ab94a8_JaffaCakes118
Size

712KB
Sample

241030-3x9ymstgpf
MD5

80b102573a985be37f1eadbbb7ab94a8
SHA1

ee8d67dcbe0bfb840b743f2b995438d6a89eb17d
SHA256

61b0875321fd4ee0cfc5096691dfa3ffeec7f4f893d1a712dc50b736cc7dc38a
SHA512

61bc870e0ca64bb88e34380f8f176f4716ab3fd481bfcaa55f7eefc0957ae2b3f1ef9ba4107a905e22c995e8af127efbded80fd7bcd5a876cec6ca783b72dc3f
SSDEEP

12288:UaAchpWsuVtDnBsBDJIcynnC90levX4CuYf2D82T3s99+VHuNKp:lAEE3uBDhynCylQgi63O9+VuNQ

Score

10^/10

darkcomet discovery evasion rat trojan

Malware Config

Targets

- Target
  
  80b102573a985be37f1eadbbb7ab94a8_JaffaCakes118
- Size
  
  712KB
- MD5
  
  80b102573a985be37f1eadbbb7ab94a8
- SHA1
  
  ee8d67dcbe0bfb840b743f2b995438d6a89eb17d
- SHA256
  
  61b0875321fd4ee0cfc5096691dfa3ffeec7f4f893d1a712dc50b736cc7dc38a
- SHA512
  
  61bc870e0ca64bb88e34380f8f176f4716ab3fd481bfcaa55f7eefc0957ae2b3f1ef9ba4107a905e22c995e8af127efbded80fd7bcd5a876cec6ca783b72dc3f
- SSDEEP
  
  12288:UaAchpWsuVtDnBsBDJIcynnC90levX4CuYf2D82T3s99+VHuNKp:lAEE3uBDhynCylQgi63O9+VuNQ
Score

10^/10

darkcomet discovery evasion rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Modifies security service
  evasion
- Windows security bypass
  evasion trojan
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryevasionrattrojan

behavioral2

darkcometdiscoveryevasionrattrojan