darkcomet

General

Target

d4bee2f5a634f3b857869f6f64ee0ad7_JaffaCakes118
Size

403KB
Sample

241208-cl3r3swqfv
MD5

d4bee2f5a634f3b857869f6f64ee0ad7
SHA1

2d4cda955bc6bbba8809603cb77b67f8f52f240d
SHA256

b97ecb6f21b036150b573f4fb698203f466830476e861b78ebdfc3783237eed5
SHA512

3348620d03d5d84c27c0df3fbbe0f7e9f273430b1cfff5141116fcaef94e33b40ff26f22421cb9172ca69d4a87d913be62b1057f5ba3712709ac51f991a49c61
SSDEEP

12288:ybxmzF9k0IZvQu85iGFoVs4ts/IHPCY35hh:ye3Lt5J2Xts/GqY3l

Score

10^/10

Malware Config

Targets

- Target
  
  d4bee2f5a634f3b857869f6f64ee0ad7_JaffaCakes118
- Size
  
  403KB
- MD5
  
  d4bee2f5a634f3b857869f6f64ee0ad7
- SHA1
  
  2d4cda955bc6bbba8809603cb77b67f8f52f240d
- SHA256
  
  b97ecb6f21b036150b573f4fb698203f466830476e861b78ebdfc3783237eed5
- SHA512
  
  3348620d03d5d84c27c0df3fbbe0f7e9f273430b1cfff5141116fcaef94e33b40ff26f22421cb9172ca69d4a87d913be62b1057f5ba3712709ac51f991a49c61
- SSDEEP
  
  12288:ybxmzF9k0IZvQu85iGFoVs4ts/IHPCY35hh:ye3Lt5J2Xts/GqY3l
Score

10^/10

darkcomet discovery rat trojan upx
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

4

T1012

System Information Discovery

5

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Darkcomet family

Checks BIOS information in registry

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2