darkcomet | 1ed01cf02e8b454351dc9fe1ea51e95d48da0c555a19c90170636eaba386bb83 | Triage

Submit
Reports

Overview

overview

Static

static

d50bd45a58...18.exe

windows7-x64

d50bd45a58...18.exe

windows10-2004-x64

Sharing

General

Target

d50bd45a58d5950b771345f9df0a8fba_JaffaCakes118
Size

713KB
Sample

241208-d4mz1szqgy
MD5

d50bd45a58d5950b771345f9df0a8fba
SHA1

9fb23f212d547c05aec95c87df0dbf9116980efb
SHA256

1ed01cf02e8b454351dc9fe1ea51e95d48da0c555a19c90170636eaba386bb83
SHA512

2f0aae1f9674c270cbe72a56279557a27b0cde63dc863f64db4775c902a4c2bc58b2c150647108679281117cd23a0edca8e6f6c09e126d9737ee422f4f962174
SSDEEP

12288:OaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdm:PAEENIq8XwyVPQclDq/+WnpsSm

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

d50bd45a58d5950b771345f9df0a8fba_JaffaCakes118.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

d50bd45a58d5950b771345f9df0a8fba_JaffaCakes118.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  d50bd45a58d5950b771345f9df0a8fba_JaffaCakes118
- Size
  
  713KB
- MD5
  
  d50bd45a58d5950b771345f9df0a8fba
- SHA1
  
  9fb23f212d547c05aec95c87df0dbf9116980efb
- SHA256
  
  1ed01cf02e8b454351dc9fe1ea51e95d48da0c555a19c90170636eaba386bb83
- SHA512
  
  2f0aae1f9674c270cbe72a56279557a27b0cde63dc863f64db4775c902a4c2bc58b2c150647108679281117cd23a0edca8e6f6c09e126d9737ee422f4f962174
- SSDEEP
  
  12288:OaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdm:PAEENIq8XwyVPQclDq/+WnpsSm
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

darkcometdiscoveryrattrojan

© 2018-2024

Terms | Privacy