darkcomet | 616f1246adc976e3500fd90099f574f5e63852e3d59c406e786b1984336c17a7 | Triage

Sharing

General

Target

c9d47836389a2b312e351a23e421a05b_JaffaCakes118
Size

1.2MB
Sample

241205-246n5atjer
MD5

c9d47836389a2b312e351a23e421a05b
SHA1

aba47b07e4cd4396e766a7170cac997492680018
SHA256

616f1246adc976e3500fd90099f574f5e63852e3d59c406e786b1984336c17a7
SHA512

98d307857d2325a6ff42d73f3008953dd08e02867343944c87ed85efa126f626c1a967549b29ba8e6112720b7dee21dc5d1c86fd8d437f3672bd03b5fbadf96e
SSDEEP

24576:6nAw2WWeFcfbP9VPSPMTSPL/rWvzq4JJfpkJlzD4NmDGutAzlD+k:wELbVMTrOq4+3kpo4ZL

Score

10^/10

darkcomet bot discovery rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Bot

C2

0stg4me.no-ip.biz:1604

Mutex

DC_MUTEX-8J81LRF

Attributes

gencode
G7btStsP5PGR
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  c9d47836389a2b312e351a23e421a05b_JaffaCakes118
- Size
  
  1.2MB
- MD5
  
  c9d47836389a2b312e351a23e421a05b
- SHA1
  
  aba47b07e4cd4396e766a7170cac997492680018
- SHA256
  
  616f1246adc976e3500fd90099f574f5e63852e3d59c406e786b1984336c17a7
- SHA512
  
  98d307857d2325a6ff42d73f3008953dd08e02867343944c87ed85efa126f626c1a967549b29ba8e6112720b7dee21dc5d1c86fd8d437f3672bd03b5fbadf96e
- SSDEEP
  
  24576:6nAw2WWeFcfbP9VPSPMTSPL/rWvzq4JJfpkJlzD4NmDGutAzlD+k:wELbVMTrOq4+3kpo4ZL
Score

10^/10

darkcomet bot discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometbotdiscoveryrattrojan

behavioral2

darkcometbotdiscoveryrattrojan