darkcomet | 0a18cd77892a80f46568432760623ee18e3c407b807063b0c2e25aca16e37aa4 | Triage

Sharing

General

Target

cfc90475af80ae607376e211094ee445_JaffaCakes118
Size

846KB
Sample

241207-arelbswkew
MD5

cfc90475af80ae607376e211094ee445
SHA1

04496e446d423f34fb02a77a98de4a8c648cb7a8
SHA256

0a18cd77892a80f46568432760623ee18e3c407b807063b0c2e25aca16e37aa4
SHA512

7155626403c678006ae5f52b7d1566c854a847387d0177f912c0a8fd5c74458706863231f329ac243bd25ebca7765d22a946c6ad8843532515588490781f84c1
SSDEEP

12288:OOfBr/G+fxNtf5sHO0fjidESYY+Pa9JG7e8AWbDeoRnRUVqRt9/DJg:5/G+dhl0rqYY+P0IFDeERUyC

Score

10^/10

darkcomet discovery evasion rat trojan

Malware Config

Targets

- Target
  
  cfc90475af80ae607376e211094ee445_JaffaCakes118
- Size
  
  846KB
- MD5
  
  cfc90475af80ae607376e211094ee445
- SHA1
  
  04496e446d423f34fb02a77a98de4a8c648cb7a8
- SHA256
  
  0a18cd77892a80f46568432760623ee18e3c407b807063b0c2e25aca16e37aa4
- SHA512
  
  7155626403c678006ae5f52b7d1566c854a847387d0177f912c0a8fd5c74458706863231f329ac243bd25ebca7765d22a946c6ad8843532515588490781f84c1
- SSDEEP
  
  12288:OOfBr/G+fxNtf5sHO0fjidESYY+Pa9JG7e8AWbDeoRnRUVqRt9/DJg:5/G+dhl0rqYY+P0IFDeERUyC
Score

10^/10

darkcomet discovery evasion rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Modifies firewall policy service
  evasion
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryevasionrattrojan

behavioral2