darkcomet | 1adceb6315ba775ecb5019cfae72b39a06351c098895e3e9370c3fce3712459d

General

Target
1adceb6315ba775ecb5019cfae72b39a06351c098895e3e9370c3fce3712459da.exe
Size 251KB
Sample260528-ynqq7acv8v
SHA256 1adceb6315ba775ecb5019cfae72b39a06351c098895e3e9370c3fce3712459d
MD5 8da896375e5d33e7d7486dbf71d008d8
SHA1 c3582c010c4d9ab5142e886409e005b2c497b95b
SHA512 482883769fa753bf923010e12f0a714de039a8a05a56f37155b4bea9386acb7150cb335859355f5bb4ac93adaacefecceb3a6ddb1225b4a9d35d87bf8bc2f8e5
SSDEEP 6144:jcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37Cy:jcW7KEZlPzCy37f
TLSH
T1AD4422A57BC59C43EAFDAAFC065C0B085B4933DB2EEE82919F2103487192996175363D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

80.85.154.180:1456

Mutex

DC_MUTEX-96M7W90

Attributes

gencode
0N6v44S6oBbf
install
false
offline_keylogger
true
persistence
false

rc4.plain

Targets

- Target
  1adceb6315ba775ecb5019cfae72b39a06351c098895e3e9370c3fce3712459da.exe
- Size 251KB
- SHA256 1adceb6315ba775ecb5019cfae72b39a06351c098895e3e9370c3fce3712459d
- MD5 8da896375e5d33e7d7486dbf71d008d8
- SHA1 c3582c010c4d9ab5142e886409e005b2c497b95b
- SHA512 482883769fa753bf923010e12f0a714de039a8a05a56f37155b4bea9386acb7150cb335859355f5bb4ac93adaacefecceb3a6ddb1225b4a9d35d87bf8bc2f8e5
- SSDEEP 6144:jcNYS996KFifeVjBpeExgVTFSXFoMc5RhCaL37Cy:jcW7KEZlPzCy37f
- TLSH
  T1AD4422A57BC59C43EAFDAAFC065C0B085B4933DB2EEE82919F2103487192996175363D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

guest16 discovery darkcomet rat trojan upx
- Family: Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: Darkcomet

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2