darkcomet | 05de9d82466e1bda62e7d606a7fd87fb33cac0264dc37718a46fda86d84383e4 | Triage

Submit
Reports

Overview

overview

Static

static

3

cd1f24ff03...18.exe

windows7-x64

cd1f24ff03...18.exe

windows10-2004-x64

5

Sharing

General

Target

cd1f24ff03c12972e51f7e6ebf43f556_JaffaCakes118
Size

1.1MB
Sample

241206-p8wnhatrfn
MD5

cd1f24ff03c12972e51f7e6ebf43f556
SHA1

9879483cef192b87601e12ed02b37930422d7418
SHA256

05de9d82466e1bda62e7d606a7fd87fb33cac0264dc37718a46fda86d84383e4
SHA512

5ad44e308c7ed41efbe1143a929b17c55865b3e6f27b153d474ee4099e86385da7a41dd84965fde3e1d108a48144a87877a177070c64718f279f4aa683c986f5
SSDEEP

24576:mVKHkkUv8dEMDwZAlfF7f7e3g/ja35/IwdiW2AI+MB55KE0hSqxMNcK:md4R8ZAld7e3gW35H2AY553sSqaX

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

cd1f24ff03c12972e51f7e6ebf43f556_JaffaCakes118.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

cd1f24ff03c12972e51f7e6ebf43f556_JaffaCakes118.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  cd1f24ff03c12972e51f7e6ebf43f556_JaffaCakes118
- Size
  
  1.1MB
- MD5
  
  cd1f24ff03c12972e51f7e6ebf43f556
- SHA1
  
  9879483cef192b87601e12ed02b37930422d7418
- SHA256
  
  05de9d82466e1bda62e7d606a7fd87fb33cac0264dc37718a46fda86d84383e4
- SHA512
  
  5ad44e308c7ed41efbe1143a929b17c55865b3e6f27b153d474ee4099e86385da7a41dd84965fde3e1d108a48144a87877a177070c64718f279f4aa683c986f5
- SSDEEP
  
  24576:mVKHkkUv8dEMDwZAlfF7f7e3g/ja35/IwdiW2AI+MB55KE0hSqxMNcK:md4R8ZAld7e3gW35H2AY553sSqaX
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

© 2018-2024

Terms | Privacy