darkcomet | d9326dffc8a9cbf0967cc17e1ba9c7e91baea6fded04ff7793f6ef2152a636b8 | Triage

Sharing

General

Target

e33755dab270ae10833511ebce5ef4bb_JaffaCakes118
Size

658KB
Sample

241211-zwwsvasqbj
MD5

e33755dab270ae10833511ebce5ef4bb
SHA1

ffeeb0eae3c8485018b4fbafb912ff0deed3cd67
SHA256

d9326dffc8a9cbf0967cc17e1ba9c7e91baea6fded04ff7793f6ef2152a636b8
SHA512

beb72427faedfaabeb034fe9b311a8c8e2c7b9aed6098470765e55b972d9c7872831088f7d51d1820197b9576fd52118b06811a5addcb1c84461317ad3ef9d9f
SSDEEP

12288:u9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h:6Z1xuVVjfFoynPaVBUR8f+kN10EB

Score

10^/10

darkcomet anton discovery rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Anton

C2

91.18.236.176:8080

Mutex

DCMIN_MUTEX-MS37SKF

Attributes

gencode
ZwCJqMEcjDty
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  e33755dab270ae10833511ebce5ef4bb_JaffaCakes118
- Size
  
  658KB
- MD5
  
  e33755dab270ae10833511ebce5ef4bb
- SHA1
  
  ffeeb0eae3c8485018b4fbafb912ff0deed3cd67
- SHA256
  
  d9326dffc8a9cbf0967cc17e1ba9c7e91baea6fded04ff7793f6ef2152a636b8
- SHA512
  
  beb72427faedfaabeb034fe9b311a8c8e2c7b9aed6098470765e55b972d9c7872831088f7d51d1820197b9576fd52118b06811a5addcb1c84461317ad3ef9d9f
- SSDEEP
  
  12288:u9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h:6Z1xuVVjfFoynPaVBUR8f+kN10EB
Score

10^/10

darkcomet anton discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometantondiscoveryrattrojan

behavioral2

darkcometantondiscoveryrattrojan