darkcomet | 09c7b436a16f19b59bbd78df98ac65790d34b8d1d70cf68209f3853787639086 | Triage

Submit
Reports

Overview

overview

Static

static

3

876f0cbd34...18.exe

windows7-x64

876f0cbd34...18.exe

windows10-2004-x64

Sharing

General

Target

876f0cbd348a84a07460fccdaa67e0ab_JaffaCakes118
Size

783KB
Sample

241102-yqyjtatfjb
MD5

876f0cbd348a84a07460fccdaa67e0ab
SHA1

8504f842d8479f0260d24b97b0756e1f40e9994f
SHA256

09c7b436a16f19b59bbd78df98ac65790d34b8d1d70cf68209f3853787639086
SHA512

e900f572b99144d50404dda06166c5bde9db54b507fd23a9a238690425dbb47842e16c3a609cb924e43e122cc1ddc1aa4818b3f8f6cde3ecb500fdfaaa35dba3
SSDEEP

12288:qEyrUptexuIZjd0Sl8EGnMPZyFAWTB1HBfS5Ho1ar8/OpDlMssjFRxgJUT/nf:qEf8xuI70SOE7PwG21hfS9aarx9l277T

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

876f0cbd348a84a07460fccdaa67e0ab_JaffaCakes118.exe

Resource

win7-20241010-en

darkcomet discovery rat trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

876f0cbd348a84a07460fccdaa67e0ab_JaffaCakes118.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  876f0cbd348a84a07460fccdaa67e0ab_JaffaCakes118
- Size
  
  783KB
- MD5
  
  876f0cbd348a84a07460fccdaa67e0ab
- SHA1
  
  8504f842d8479f0260d24b97b0756e1f40e9994f
- SHA256
  
  09c7b436a16f19b59bbd78df98ac65790d34b8d1d70cf68209f3853787639086
- SHA512
  
  e900f572b99144d50404dda06166c5bde9db54b507fd23a9a238690425dbb47842e16c3a609cb924e43e122cc1ddc1aa4818b3f8f6cde3ecb500fdfaaa35dba3
- SSDEEP
  
  12288:qEyrUptexuIZjd0Sl8EGnMPZyFAWTB1HBfS5Ho1ar8/OpDlMssjFRxgJUT/nf:qEf8xuI70SOE7PwG21hfS9aarx9l277T
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

darkcometdiscoveryrattrojan

© 2018-2024

Terms | Privacy