darkcomet | 1972fbe99a0b8bb2ee311d647e1edddd641101e88a90dd996f2ded32ffa0739e | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...ae.exe

windows7-x64

JaffaCakes...ae.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_a45910227b2972631ea2c572157d2eae
Size

672KB
Sample

250118-jy4ngaxnes
MD5

a45910227b2972631ea2c572157d2eae
SHA1

40216c90ed63c37017110e44bdc681256043fb04
SHA256

1972fbe99a0b8bb2ee311d647e1edddd641101e88a90dd996f2ded32ffa0739e
SHA512

1273b1e318127b366da328402f67670c65d9c017688b5d945515868a49e9b5e6df8295a9e015fdbfa135b9bc17fa0c14e41c2bc392aa9f43fe92ddd23cd4719f
SSDEEP

12288:tfVHOoBQsfPyok7xlDDSMcEuv5I1I7FRfP+mxLnEdhDygtNUh+aExrc9F:X1Sbg1fnuhey7P

Score

10^/10

darkcomet discovery rat trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_a45910227b2972631ea2c572157d2eae.exe

Resource

win7-20240729-en

darkcomet discovery rat trojan upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_a45910227b2972631ea2c572157d2eae.exe

Resource

win10v2004-20241007-en

darkcomet discovery rat trojan upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_a45910227b2972631ea2c572157d2eae
- Size
  
  672KB
- MD5
  
  a45910227b2972631ea2c572157d2eae
- SHA1
  
  40216c90ed63c37017110e44bdc681256043fb04
- SHA256
  
  1972fbe99a0b8bb2ee311d647e1edddd641101e88a90dd996f2ded32ffa0739e
- SHA512
  
  1273b1e318127b366da328402f67670c65d9c017688b5d945515868a49e9b5e6df8295a9e015fdbfa135b9bc17fa0c14e41c2bc392aa9f43fe92ddd23cd4719f
- SSDEEP
  
  12288:tfVHOoBQsfPyok7xlDDSMcEuv5I1I7FRfP+mxLnEdhDygtNUh+aExrc9F:X1Sbg1fnuhey7P
Score

10^/10

darkcomet discovery rat trojan upx
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Uses the VBS compiler for execution
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometdiscoveryrattrojanupx

behavioral2

darkcometdiscoveryrattrojanupx

© 2018-2025

Terms | Privacy