darkcomet | 46468f8938461d033c5d583a9a2251368f425b4c19dfce1c68b2f6b4791a9b01 | Triage

Sharing

General

Target

JaffaCakes118_623a670eb93c9578fe74a42eda1dde68
Size

1.2MB
Sample

250102-dd6pfasjgl
MD5

623a670eb93c9578fe74a42eda1dde68
SHA1

d0ad967bee0b0d6c8c699003f742f44f3bf4b6a4
SHA256

46468f8938461d033c5d583a9a2251368f425b4c19dfce1c68b2f6b4791a9b01
SHA512

20b3e498ab3a8fed294c95966b4f5a4d801806d7b4c5fd8afb11aa113a59558c3039de5b8af8a694af640e12015429d2037d4a7b4824d1ea14dda892edacdbdf
SSDEEP

24576:iAmBpVKHu0Mu9Xo20VGLVP5H3xGUweEqAZKrUZrCqiuP+oM:iAmKZVZDHLAZIe7M

Score

10^/10

darkcomet discovery evasion rat trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_623a670eb93c9578fe74a42eda1dde68
- Size
  
  1.2MB
- MD5
  
  623a670eb93c9578fe74a42eda1dde68
- SHA1
  
  d0ad967bee0b0d6c8c699003f742f44f3bf4b6a4
- SHA256
  
  46468f8938461d033c5d583a9a2251368f425b4c19dfce1c68b2f6b4791a9b01
- SHA512
  
  20b3e498ab3a8fed294c95966b4f5a4d801806d7b4c5fd8afb11aa113a59558c3039de5b8af8a694af640e12015429d2037d4a7b4824d1ea14dda892edacdbdf
- SSDEEP
  
  24576:iAmBpVKHu0Mu9Xo20VGLVP5H3xGUweEqAZKrUZrCqiuP+oM:iAmKZVZDHLAZIe7M
Score

10^/10

darkcomet discovery evasion rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Modifies firewall policy service
  evasion
- Modifies security service
  evasion
- Windows security bypass
  evasion trojan
- Drops file in Drivers directory
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryevasionrattrojan

behavioral2

darkcometdiscoveryevasionrattrojan