Overview

overview

10

Static

static

10

DarkComet ...ty.exe

windows7-x64

3

DarkComet ...ty.exe

windows10-2004-x64

3

DarkComet ....1.exe

windows7-x64

10

DarkComet ....1.exe

windows10-2004-x64

10

DarkComet ...er.exe

windows7-x64

3

DarkComet ...er.exe

windows10-2004-x64

3

DarkComet ...e3.dll

windows7-x64

3

DarkComet ...e3.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1fe26636fcc4ba5b02c93b6f51853358

  • Size

    14.9MB

  • Sample

    250223-k66cpsspx7

  • MD5

    1fe26636fcc4ba5b02c93b6f51853358

  • SHA1

    b05872991dd30f89b65da070aad31a64f0486a98

  • SHA256

    4d3831814c1580e75d8ecd840d605c0346a085ca551318cd116a182a7f9213d5

  • SHA512

    dea400043f22655aa591452e8dfb69d6720db677e645ef3313599e6f7a6613a80fac26afbb215c89e6ed17dcc824d56d10e76d208c978b874ed601f40c5f478a

  • SSDEEP

    393216:dlg4nAGb6lo3sKE6fePOul38bVKgvLfoKrwEUlBoN6n:dG4AGbSTKE7x30fLfoKrbUlaMn

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Targets

    • Target

      DarkComet Rat v.5.3.1/Celesty Binder/Celesty.exe

    • Size

      2.7MB

    • MD5

      c3009ee63bc661d9ea75eaeb256448ca

    • SHA1

      45eb01150756df432e25eed44d976442473356de

    • SHA256

      0bb88564a22bfd6d9ad6e4d8efa9077792a7b6094c2a0f865d70c43e11507352

    • SHA512

      96f5847fbeef95df1309e97a4bc3d786a5f5c19b87e804f12d88b4473a0b50291c40407a3d95a2d5d78031f03be76da47f1846a73c7802ddae46a38ac4634e67

    • SSDEEP

      49152:vOY/SiSf6KSIshmgTlxRQv9rn0KtX2pyJz0qGoy/:tKZshhYv9ptXZJe/

    Score
    3/10
    discovery
    behavioral1behavioral2

    • Target

      DarkComet Rat v.5.3.1/DarkComet Rat v.5.3.1.exe

    • Size

      11.3MB

    • MD5

      d761f3aa64064a706a521ba14d0f8741

    • SHA1

      ab7382bcfdf494d0327fccce9c884592bcc1adeb

    • SHA256

      21ca06b18698d14154a45822aaae1e3837d168cc7630bcd3ec3d8c68aaa959e6

    • SHA512

      d2274c03f805a5cd62104492e154fc225c3f6997091accb2f4bff165308fc82ba0d9adf185ec744222bcb4ece08d1ba754a35a2d88c10c5743f4d2e66494377f

    • SSDEEP

      196608:TPvqxSrDTVokQwhM/kSEMTQINokXJw7lW740VeqQPR:LCxSrFokQw2NjUYuWU0t

    Score
    10/10
    darkcometdiscoveryrattrojan
    behavioral3behavioral4

    • Target

      DarkComet Rat v.5.3.1/Spoof extensions/Spoofer.exe

    • Size

      2.0MB

    • MD5

      894b256f41dc579a5b32828ed2f7e3db

    • SHA1

      06fa1a4dd30780e404c8f2e7a615fd54d6f2ae68

    • SHA256

      12dbd354b4cc073ea7f80cc0d74bd96118362e9c120df7800cf0f9e863569f98

    • SHA512

      bede5a2c6e87ac6d432903109cca97fcbf60fdba082ba137a04c6ca6490a548f20910b6560821816b76744235fa19f5fcbe256c1ad9b87c2c1b8b20e5c5ac409

    • SSDEEP

      24576:cuAzSWYlsCSe+I3n6HgjigeCNOu6kpBiSSgmq8uWYkzJy90qeHqywdbMQTTRwQ+0:KU1Zp6kpkSSgmSWJyqqe3wdbBTubz

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      DarkComet Rat v.5.3.1/sqlite3.dll

    • Size

      510KB

    • MD5

      d3979db259f55d59b4edb327673c1905

    • SHA1

      0697e8f35b5951c61a3a632d74fd96843c941628

    • SHA256

      043e5570299c6099756c1809c5632eabeab95ed3c1a55c86843c0ec218940e5a

    • SHA512

      0b87c89aafd3e627c7d6bed0b833601fea1917a76a972061f32a2d9e4aa2e9e85b5e8a67cb330ca44aff17915d0fe2793798451a109d3f0b5014eed06b73bb45

    • SSDEEP

      12288:eiTjR6kna/KzsHIoufPiL5JXjKaarzWovTSmja9q96fQkw8dw:em8NCzsooOPiXT6rSov2mjVw3w

    Score
    3/10
    discovery
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks