darkcomet | 69afc4ec566a36e97f430bc782801cc2bc85b875c5cf2a6ac8f1d6346286f617 | Triage

Sharing

General

Target

JaffaCakes118_17c7640ea175e15a9e75a76d00327de1
Size

713KB
Sample

250222-g2mg9a1qv6
MD5

17c7640ea175e15a9e75a76d00327de1
SHA1

c54ededb41a77dc4cad82574e003af5f97e4f65b
SHA256

69afc4ec566a36e97f430bc782801cc2bc85b875c5cf2a6ac8f1d6346286f617
SHA512

a4534e8a716618dfaaa36c1951fc1549d9bbb68316cb42365f898436446da7a1ce8d14b484cb0b2c12363b38574e41a2fb15abec60d700ffa493d6e410c7274f
SSDEEP

12288:RaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKD8sgdeY:cAEENIq8XwyVPQclDq/+WnYsSeY

Score

10^/10

darkcomet guest16 discovery rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-F54S21D

Attributes

gencode
Fzh+N9joPycA
install
false
offline_keylogger
false
persistence
false

rc4.plain

Targets

- Target
  
  JaffaCakes118_17c7640ea175e15a9e75a76d00327de1
- Size
  
  713KB
- MD5
  
  17c7640ea175e15a9e75a76d00327de1
- SHA1
  
  c54ededb41a77dc4cad82574e003af5f97e4f65b
- SHA256
  
  69afc4ec566a36e97f430bc782801cc2bc85b875c5cf2a6ac8f1d6346286f617
- SHA512
  
  a4534e8a716618dfaaa36c1951fc1549d9bbb68316cb42365f898436446da7a1ce8d14b484cb0b2c12363b38574e41a2fb15abec60d700ffa493d6e410c7274f
- SSDEEP
  
  12288:RaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKD8sgdeY:cAEENIq8XwyVPQclDq/+WnYsSeY
Score

10^/10

darkcomet guest16 discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

guest16darkcomet

behavioral1

darkcometguest16discoveryrattrojan

behavioral2

darkcometguest16discoveryrattrojan