darkcomet

General

Target
JaffaCakes118_f0b8852c0b559264764e4b682e1c1117
Size 448KB
Sample250120-t4eawaymer
SHA256 16181fddc28a16679199e91d57fec4ee7ecf2a8ab478783667960c69c446d410
MD5 f0b8852c0b559264764e4b682e1c1117
SHA1 13182e5f1c700f246d452d702a6b3d49417fbf53
SHA512 7afc8b2509e61a623b4369e4b4d7c683945b3537bf661ac1480297e5147d445d7daee7200b9b0dadaa5cb766335c680bb3f2989d1b8edf9e6a3a8742571d4ca6
SSDEEP 12288:NP4KfCRm47i/2Yku5upF1R36NaQ4ppnJN9IJaeh:VGHYkuspPRUQmJaO
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-1DN0ZPY

Attributes

gencode
pnkjqJ5i6PP5
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  JaffaCakes118_f0b8852c0b559264764e4b682e1c1117
- Size 448KB
- SHA256 16181fddc28a16679199e91d57fec4ee7ecf2a8ab478783667960c69c446d410
- MD5 f0b8852c0b559264764e4b682e1c1117
- SHA1 13182e5f1c700f246d452d702a6b3d49417fbf53
- SHA512 7afc8b2509e61a623b4369e4b4d7c683945b3537bf661ac1480297e5147d445d7daee7200b9b0dadaa5cb766335c680bb3f2989d1b8edf9e6a3a8742571d4ca6
- SSDEEP 12288:NP4KfCRm47i/2Yku5upF1R36NaQ4ppnJN9IJaeh:VGHYkuspPRUQmJaO
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

darkcomet guest16 discovery rat trojan upx
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Darkcomet family

Suspicious use of SetThreadContext

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2