darkcomet | 29765c1401f4fbc04f47647f6803f91da64c74195f4dc88afdc285629a784a0b | Triage

Sharing

General

Target

JaffaCakes118_bb241c277c45c844adf75adcbcbbca6f
Size

745KB
Sample

250417-zvw28atqw7
MD5

bb241c277c45c844adf75adcbcbbca6f
SHA1

046daed4bf85b1a77a38cf729d5bc4c9316a5779
SHA256

29765c1401f4fbc04f47647f6803f91da64c74195f4dc88afdc285629a784a0b
SHA512

aa1a151f4d0ba70cbc249fbf58afc59cacbcc421ced082e76a533e1b461c21dbb9d74e701529157f1ced48b129d8ff4e6be082ca98745532bc90c1a1846dbdd8
SSDEEP

12288:O6A84PaHhfD/tV9sj5NKR0pau9XGyu2qBVGLQyTPfhyFIIhII:zAmBpVKHu0Mu9Xo20VGLVP5

Score

10^/10

darkcomet guest16 discovery rat trojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-F54S21D

Attributes

gencode
�1h1$iQwcqLP
install
false
offline_keylogger
false
persistence
false

rc4.plain

Targets

- Target
  
  JaffaCakes118_bb241c277c45c844adf75adcbcbbca6f
- Size
  
  745KB
- MD5
  
  bb241c277c45c844adf75adcbcbbca6f
- SHA1
  
  046daed4bf85b1a77a38cf729d5bc4c9316a5779
- SHA256
  
  29765c1401f4fbc04f47647f6803f91da64c74195f4dc88afdc285629a784a0b
- SHA512
  
  aa1a151f4d0ba70cbc249fbf58afc59cacbcc421ced082e76a533e1b461c21dbb9d74e701529157f1ced48b129d8ff4e6be082ca98745532bc90c1a1846dbdd8
- SSDEEP
  
  12288:O6A84PaHhfD/tV9sj5NKR0pau9XGyu2qBVGLQyTPfhyFIIhII:zAmBpVKHu0Mu9Xo20VGLVP5
Score

10^/10

darkcomet guest16 discovery rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Darkcomet family
  darkcomet
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

guest16darkcomet

behavioral1

darkcometguest16discoveryrattrojan

behavioral2

darkcometguest16discoveryrattrojan