darkcomet | 07827eafa7579ec17e71aed6faed2ee29eb427c589962be298e26a732ff1897d | Triage

Submit
Reports

Overview

overview

Static

static

3

e1666dc9e5...18.exe

windows7-x64

e1666dc9e5...18.exe

windows10-2004-x64

Sharing

General

Target

e1666dc9e55fc62fe75f2bfbbbf33994_JaffaCakes118
Size

813KB
Sample

241211-pczqaawpbp
MD5

e1666dc9e55fc62fe75f2bfbbbf33994
SHA1

dc3c69a69ff0864ff038b61c53f69f19d47ed80a
SHA256

07827eafa7579ec17e71aed6faed2ee29eb427c589962be298e26a732ff1897d
SHA512

eabd298dff4b9a342fe6f6a90f310d63e3bf25e2556191bd2ce0d4103e25dd37d51de2a5de2a59fe588810b48cd26ec1c9f34b552b4acfec958e4d89a3f9c329
SSDEEP

24576:xbsRhlHPETniv6iatoAKCYblZzvOoya2T9W0SS+U/RRSj/wxVAPYYvvG:FsRhlHPETniv6iatoAKCYbl9moya2p0C

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e1666dc9e55fc62fe75f2bfbbbf33994_JaffaCakes118.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

e1666dc9e55fc62fe75f2bfbbbf33994_JaffaCakes118.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  e1666dc9e55fc62fe75f2bfbbbf33994_JaffaCakes118
- Size
  
  813KB
- MD5
  
  e1666dc9e55fc62fe75f2bfbbbf33994
- SHA1
  
  dc3c69a69ff0864ff038b61c53f69f19d47ed80a
- SHA256
  
  07827eafa7579ec17e71aed6faed2ee29eb427c589962be298e26a732ff1897d
- SHA512
  
  eabd298dff4b9a342fe6f6a90f310d63e3bf25e2556191bd2ce0d4103e25dd37d51de2a5de2a59fe588810b48cd26ec1c9f34b552b4acfec958e4d89a3f9c329
- SSDEEP
  
  24576:xbsRhlHPETniv6iatoAKCYblZzvOoya2T9W0SS+U/RRSj/wxVAPYYvvG:FsRhlHPETniv6iatoAKCYbl9moya2p0C
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

darkcometdiscoveryrattrojan

© 2018-2024

Terms | Privacy