darkcomet | 3c85f80402648183c16f7b85d3a9f732a2addd229c4a1ad906a17955a82cd138 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...02.exe

windows7-x64

JaffaCakes...02.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_6359468cab346a2c028ca4319bb08302
Size

729KB
Sample

250102-hnf9rayqbx
MD5

6359468cab346a2c028ca4319bb08302
SHA1

4b095b3d961878ec375e82f2f8ab87514c364ede
SHA256

3c85f80402648183c16f7b85d3a9f732a2addd229c4a1ad906a17955a82cd138
SHA512

85ca59e97238a7a764287874ad7834ae802ecb8c22c1e59f3a1080d1faea73dd409c89802c9f8381b404b896542288a3324cdc71b0e01b71917b3b4176e315d4
SSDEEP

12288:jiQQoMrqlyn040pgZwS/2iFkKPGZH5mbYYJreuDs1nX31usRZHeto9Nxc:jiLoMrqwn0tpgZwgOmPbol3UsRBHxc

Score

10^/10

darkcomet discovery rat trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_6359468cab346a2c028ca4319bb08302.exe

Resource

win7-20240708-en

darkcomet discovery rat trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_6359468cab346a2c028ca4319bb08302.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_6359468cab346a2c028ca4319bb08302
- Size
  
  729KB
- MD5
  
  6359468cab346a2c028ca4319bb08302
- SHA1
  
  4b095b3d961878ec375e82f2f8ab87514c364ede
- SHA256
  
  3c85f80402648183c16f7b85d3a9f732a2addd229c4a1ad906a17955a82cd138
- SHA512
  
  85ca59e97238a7a764287874ad7834ae802ecb8c22c1e59f3a1080d1faea73dd409c89802c9f8381b404b896542288a3324cdc71b0e01b71917b3b4176e315d4
- SSDEEP
  
  12288:jiQQoMrqlyn040pgZwS/2iFkKPGZH5mbYYJreuDs1nX31usRZHeto9Nxc:jiLoMrqwn0tpgZwgOmPbol3UsRBHxc
Score

10^/10

darkcomet discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojan

behavioral2

darkcometdiscoveryrattrojan

© 2018-2025

Terms | Privacy