darkcomet | a1a8c265e3f6a0c64676ece658cc7c11f5aaa7bfc3b59268c6b931db9b2d9631 | Triage

Submit
Reports

Overview

overview

Static

static

fc5cd0ec4a...18.exe

windows7-x64

fc5cd0ec4a...18.exe

windows10-2004-x64

Sharing

General

Target

fc5cd0ec4a96dd9f03171d021c9e7681_JaffaCakes118
Size

992KB
Sample

241218-vds7savqgs
MD5

fc5cd0ec4a96dd9f03171d021c9e7681
SHA1

53813e18be5ecf4542792193f81587871fa2637e
SHA256

a1a8c265e3f6a0c64676ece658cc7c11f5aaa7bfc3b59268c6b931db9b2d9631
SHA512

63f9356b4c3599f47b141a42a7bd126b83c6c77eab75044c11f5a0d3c830979b7923a90d8c67b68bdd6ccc639efea0cac04037fa225ff3317e6dcb730aa9e468
SSDEEP

24576:AAEE3uBDhynCylQgi63O9+VcN7Uw0QZh9u:AAE3JX63OMcq

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

fc5cd0ec4a96dd9f03171d021c9e7681_JaffaCakes118.exe

Resource

win7-20240903-en

darkcomet discovery rat trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

fc5cd0ec4a96dd9f03171d021c9e7681_JaffaCakes118.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  fc5cd0ec4a96dd9f03171d021c9e7681_JaffaCakes118
- Size
  
  992KB
- MD5
  
  fc5cd0ec4a96dd9f03171d021c9e7681
- SHA1
  
  53813e18be5ecf4542792193f81587871fa2637e
- SHA256
  
  a1a8c265e3f6a0c64676ece658cc7c11f5aaa7bfc3b59268c6b931db9b2d9631
- SHA512
  
  63f9356b4c3599f47b141a42a7bd126b83c6c77eab75044c11f5a0d3c830979b7923a90d8c67b68bdd6ccc639efea0cac04037fa225ff3317e6dcb730aa9e468
- SSDEEP
  
  24576:AAEE3uBDhynCylQgi63O9+VcN7Uw0QZh9u:AAE3JX63OMcq
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Drops file in Drivers directory
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

darkcometdiscoveryrattrojan

© 2018-2024

Terms | Privacy