darkcomet | a6628fda9ddd921a3f3bff5fa1b98ced612802c0461d6d5c59d2c52ca0e70488 | Triage

Sharing

General

Target

ef08c64528f0352e17a886f58f2647f9_JaffaCakes118
Size

338KB
Sample

241214-qya5gsvqhk
MD5

ef08c64528f0352e17a886f58f2647f9
SHA1

3f8cc05f44d9624d3e677f37c22637036cff6b03
SHA256

a6628fda9ddd921a3f3bff5fa1b98ced612802c0461d6d5c59d2c52ca0e70488
SHA512

f41c050a3e81d374c017628bf953f31c6afeaad871ac48dec5d57b2920a947b5c8cc249690dbcc21bbb7b55e47bceddc47bcd5a8e0d9f143b97a0b1685f02251
SSDEEP

6144:wDzKU4HqPUHLPR/84M2563V4NZZ+f0+VTdkTHwMGdnQdjoQ5d804zq2:wHKU4HhHLOK63GZU0GoHw9dnGjtNS

Score

10^/10

darkcomet zombie discovery rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Zombie

C2

1m91.no-ip.biz:1604

Mutex

DC_MUTEX-QRRTQX4

Attributes

gencode
GZRtyh2Wnpdz
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  ef08c64528f0352e17a886f58f2647f9_JaffaCakes118
- Size
  
  338KB
- MD5
  
  ef08c64528f0352e17a886f58f2647f9
- SHA1
  
  3f8cc05f44d9624d3e677f37c22637036cff6b03
- SHA256
  
  a6628fda9ddd921a3f3bff5fa1b98ced612802c0461d6d5c59d2c52ca0e70488
- SHA512
  
  f41c050a3e81d374c017628bf953f31c6afeaad871ac48dec5d57b2920a947b5c8cc249690dbcc21bbb7b55e47bceddc47bcd5a8e0d9f143b97a0b1685f02251
- SSDEEP
  
  6144:wDzKU4HqPUHLPR/84M2563V4NZZ+f0+VTdkTHwMGdnQdjoQ5d804zq2:wHKU4HhHLOK63GZU0GoHw9dnGjtNS
Score

10^/10

darkcomet zombie discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometzombiediscoveryrattrojan

behavioral2

darkcometzombiediscoveryrattrojan