darkcomet | 776a03577c0447f7ac2479c0f23a6a8d40073f93c8ae95f68dfa0041fbe16dda | Triage

Submit
Reports

Overview

overview

Static

static

3

d55af79b45...18.exe

windows7-x64

d55af79b45...18.exe

windows10-2004-x64

Sharing

General

Target

d55af79b45ec3c0965ff4fc844061fb8_JaffaCakes118
Size

786KB
Sample

241208-fl2fssypdl
MD5

d55af79b45ec3c0965ff4fc844061fb8
SHA1

fbc18eae4266e6190643a276db627b60e93af814
SHA256

776a03577c0447f7ac2479c0f23a6a8d40073f93c8ae95f68dfa0041fbe16dda
SHA512

44f1c3609897384ae84e34ec4cfed77232fd30ff0436ef4aa05b42a9e50f773875ebbcfbd3e6d52e95eed0def99d947f2215cf856b39f5ea89f7f7179ad51cf2
SSDEEP

24576:xWn+6qZRxEGeBHVKE23k3yx6fW+r3msx1mm5Vt:sqZYGeBHUhk3T7msxcm5/

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d55af79b45ec3c0965ff4fc844061fb8_JaffaCakes118.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

d55af79b45ec3c0965ff4fc844061fb8_JaffaCakes118.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  d55af79b45ec3c0965ff4fc844061fb8_JaffaCakes118
- Size
  
  786KB
- MD5
  
  d55af79b45ec3c0965ff4fc844061fb8
- SHA1
  
  fbc18eae4266e6190643a276db627b60e93af814
- SHA256
  
  776a03577c0447f7ac2479c0f23a6a8d40073f93c8ae95f68dfa0041fbe16dda
- SHA512
  
  44f1c3609897384ae84e34ec4cfed77232fd30ff0436ef4aa05b42a9e50f773875ebbcfbd3e6d52e95eed0def99d947f2215cf856b39f5ea89f7f7179ad51cf2
- SSDEEP
  
  24576:xWn+6qZRxEGeBHVKE23k3yx6fW+r3msx1mm5Vt:sqZYGeBHUhk3T7msxcm5/
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Drops file in Drivers directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

darkcometdiscoveryrattrojan

© 2018-2024

Terms | Privacy