darkcomet | 197cef0a8c37661eb17220eadd936709eeab7844080d089f44d89803d4a7a946 | Triage

Resubmissions

10-12-2024 08:15

241210-j5nwlazqas 10

28-11-2022 01:03

221128-beqy9sce65 10

Sharing

General

Target

197cef0a8c37661eb17220eadd936709eeab7844080d089f44d89803d4a7a946
Size

658KB
Sample

241210-j5nwlazqas
MD5

0575c74ae9681d4a3ca5c36219e4c9f8
SHA1

1caf9c381dff41502d07633ce6185a4f8a357b46
SHA256

197cef0a8c37661eb17220eadd936709eeab7844080d089f44d89803d4a7a946
SHA512

2f408011cd748a6af3ee46a3edf16be4f4a1dab918391bfc07e6806b427f873e11e764c65e6671fa203e1940ada8c1e4184a50d0d16b4a5aef7757340dce9bad
SSDEEP

12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hN:uZ1xuVVjfFoynPaVBUR8f+kN10EB/

Score

10^/10

darkcomet test discovery rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Test

C2

127.0.0.1:1604

Mutex

DC_MUTEX-7NSPUSQ

Attributes

gencode
tS2wU760jKeo
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  197cef0a8c37661eb17220eadd936709eeab7844080d089f44d89803d4a7a946
- Size
  
  658KB
- MD5
  
  0575c74ae9681d4a3ca5c36219e4c9f8
- SHA1
  
  1caf9c381dff41502d07633ce6185a4f8a357b46
- SHA256
  
  197cef0a8c37661eb17220eadd936709eeab7844080d089f44d89803d4a7a946
- SHA512
  
  2f408011cd748a6af3ee46a3edf16be4f4a1dab918391bfc07e6806b427f873e11e764c65e6671fa203e1940ada8c1e4184a50d0d16b4a5aef7757340dce9bad
- SSDEEP
  
  12288:C9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hN:uZ1xuVVjfFoynPaVBUR8f+kN10EB/
Score

10^/10

darkcomet test discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcomettestdiscoveryrattrojan