darkcomet | 70384e8c5ba3d348bf34e7071759c64c52fa2e21ac9c331e719cbf9116efa57d | Triage™

Login
Reports

Overview

overview

Static

static

8

70384e8c5b...7d.exe

windows7_x64

70384e8c5b...7d.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
70384e8c5ba3d348bf34e7071759c64c52fa2e21ac9c331e719cbf9116efa57d
Size 253KB
Sample201109-rmppfxt6mx
SHA256 70384e8c5ba3d348bf34e7071759c64c52fa2e21ac9c331e719cbf9116efa57d
MD5 caaef1f76dd911414c85eca22856b38c
SHA1 b767c8080a8baebc703481fa1ddab8d87bfb6718
SHA512 eaee4415f217ac020d4467cb3dc7ad41b112fa151fcae6d6d89cabedab5a520a424fead5cc81ed5582126268e4d644104f6ee8fe79f15e547547070098afb50a
MD5 SHA1 SHA512

Score

10^/10

darkcomet persistence rat trojan upx

Static task

static1

Behavioral task

behavioral1

Sample

70384e8c5ba3d348bf34e7071759c64c52fa2e21ac9c331e719cbf9116efa57d.exe

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

darkcomet persistence rat trojan

Behavioral task

behavioral2

Sample

70384e8c5ba3d348bf34e7071759c64c52fa2e21ac9c331e719cbf9116efa57d.exe

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

darkcomet persistence rat trojan

Malware Config

Targets

- Target
  70384e8c5ba3d348bf34e7071759c64c52fa2e21ac9c331e719cbf9116efa57d
- Size 253KB
- SHA256 70384e8c5ba3d348bf34e7071759c64c52fa2e21ac9c331e719cbf9116efa57d
- MD5 caaef1f76dd911414c85eca22856b38c
- SHA1 b767c8080a8baebc703481fa1ddab8d87bfb6718
- SHA512 eaee4415f217ac020d4467cb3dc7ad41b112fa151fcae6d6d89cabedab5a520a424fead5cc81ed5582126268e4d644104f6ee8fe79f15e547547070098afb50a
- MD5 SHA1 SHA512
Score

10^/10

darkcomet persistence rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

darkcometpersistencerattrojan

behavioral2

darkcometpersistencerattrojan

© 2018-2026

Terms | Privacy