darkcomet | 25af20c3254036359648834d15ce109cfb79e77e68e215fbfd17e81376660f89 | Triage

Submit
Reports

Overview

overview

Static

static

ec0949b9fb...18.exe

windows7-x64

ec0949b9fb...18.exe

windows10-2004-x64

Sharing

General

Target

ec0949b9fb9eb706aeb3ba37bb6440a8_JaffaCakes118
Size

712KB
Sample

241213-r88deatler
MD5

ec0949b9fb9eb706aeb3ba37bb6440a8
SHA1

12a30de98c30f9132c6ea62589f73b513e965d1f
SHA256

25af20c3254036359648834d15ce109cfb79e77e68e215fbfd17e81376660f89
SHA512

f5cfcf53f1e0d120faba51475ff38635aba00acbced0577b00725067e58c5d74728256d89046f829995583ff3e3cbbc21eeed1313c91c183fc873f273667dd0d
SSDEEP

12288:IaAchpWsuVtDnBsBDJIcynnC90levXDCuYf2D82T3s99+VHuNSdW:pAEE3uBDhynCylQdi63O9+VuNUW

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ec0949b9fb9eb706aeb3ba37bb6440a8_JaffaCakes118.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

ec0949b9fb9eb706aeb3ba37bb6440a8_JaffaCakes118.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  ec0949b9fb9eb706aeb3ba37bb6440a8_JaffaCakes118
- Size
  
  712KB
- MD5
  
  ec0949b9fb9eb706aeb3ba37bb6440a8
- SHA1
  
  12a30de98c30f9132c6ea62589f73b513e965d1f
- SHA256
  
  25af20c3254036359648834d15ce109cfb79e77e68e215fbfd17e81376660f89
- SHA512
  
  f5cfcf53f1e0d120faba51475ff38635aba00acbced0577b00725067e58c5d74728256d89046f829995583ff3e3cbbc21eeed1313c91c183fc873f273667dd0d
- SSDEEP
  
  12288:IaAchpWsuVtDnBsBDJIcynnC90levXDCuYf2D82T3s99+VHuNSdW:pAEE3uBDhynCylQdi63O9+VuNUW
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

darkcometdiscoveryrattrojan

© 2018-2024

Terms | Privacy