darkcomet

General

Target
JaffaCakes118_a4eb6a1303893b0d4a85d608885bae67
Size 552KB
Sample250205-3mpjysxrer
SHA256 c25a1c46aa91763bf657fe0d8d89ef7ce6ffa3502a68e7b1bcbbfa36da210600
MD5 a4eb6a1303893b0d4a85d608885bae67
SHA1 8296373b11519d923da758a170459fe5f25c4fcf
SHA512 d0fce6d444cdbb798a131d4bd5c2a90da2bb1d713cb8e016c49326b2fd5465e68daf3fb296c5e2ee9f205057c6d312d7253a8ab2ff525a18b4f81c7d1b5e2d5d
SSDEEP 12288:RBTbuYw//baID0PDCRhyuQSRWZ41vhiv9wiiKr9CyEWNijPRO8xZ95:LGYiuID0PDuhyXSR041JiLNWPRO8
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

slohe-0.zapto.org:81

Mutex

DC_MUTEX-TVQD9XK

Attributes

gencode
oxphrJu8p2mR
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  JaffaCakes118_a4eb6a1303893b0d4a85d608885bae67
- Size 552KB
- SHA256 c25a1c46aa91763bf657fe0d8d89ef7ce6ffa3502a68e7b1bcbbfa36da210600
- MD5 a4eb6a1303893b0d4a85d608885bae67
- SHA1 8296373b11519d923da758a170459fe5f25c4fcf
- SHA512 d0fce6d444cdbb798a131d4bd5c2a90da2bb1d713cb8e016c49326b2fd5465e68daf3fb296c5e2ee9f205057c6d312d7253a8ab2ff525a18b4f81c7d1b5e2d5d
- SSDEEP 12288:RBTbuYw//baID0PDCRhyuQSRWZ41vhiv9wiiKr9CyEWNijPRO8xZ95:LGYiuID0PDuhyXSR041JiLNWPRO8
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

darkcomet guest16 discovery rat trojan upx
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
- Suspicious use of SetThreadContext
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Darkcomet family

Suspicious use of SetThreadContext

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2