Overview

overview

10

Static

static

3

Steam Game ADDER.exe

windows7-x64

10

Steam Game ADDER.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf09a2c153771bfedef620b00b914001_JaffaCakes118

  • Size

    524KB

  • Sample

    241203-yyhhkasjaw

  • MD5

    bf09a2c153771bfedef620b00b914001

  • SHA1

    dd04004cb587964984946e40a64788557c1ac4f3

  • SHA256

    cb7e5589e90aa9bfb5fc80d5d6f9eb284b471f7981bc54192df466b1a687eca4

  • SHA512

    78b3420a40807365c08e6d7d633ac8f59ab08740f23aca6e5667f327f6de834989bc173221f87811afb2f4011b41d9cdbb6653ead8f3bda4bbe97b9bac25636e

  • SSDEEP

    12288:sEHYKMWB0wp+OKPpesmx7rMV4YVJwV/ecKdyrbp:sinMWBiMsC7riVaVmc+Mbp

Score
10/10
darkcometguest16discoverypersistencerattrojanupx

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

achlys.serveblog.net:9431

Mutex

DC_MUTEX-2968FX2

Attributes
  • gencode

    jWVVRsyYt9LN

  • install

    false

  • offline_keylogger

    true

  • password

    ajejas

  • persistence

    false

Targets

    • Target

      Steam Game ADDER.exe

    • Size

      1006KB

    • MD5

      4e815593f9386328e40ac7e7cc15c345

    • SHA1

      21912cfdce6013d90efd54e5e90929d00df5a701

    • SHA256

      174f2e1b5cace1731f1d8ac0e991e340498f4ad68dbc7b16a4ceb7ce7b2ead9e

    • SHA512

      3eae72b62108f75a8b9a82d81463323482218726bf658412ecdab5e4334be44142001824b7cf6b10618147c33af9d8e1dbb1fa483e1e6116c7438a5bab496d39

    • SSDEEP

      12288:utPhthkJeWix0eaQzQK6yNwFeX+Gsp2NoAkjJuDh3WUdrAVNQDJ/tt2:cQeWR6NwEXA2NoAkahdrAVNQt/tE

    Score
    10/10
    darkcometguest16discoverypersistencerattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks