darkcomet | 918b3f5a2c52068990fcce16d25f3e4454f375aceb00cefaaa8fda086bb815cf | Triage

Submit
Reports

Overview

overview

Static

static

170ff441c0...18.exe

windows7-x64

170ff441c0...18.exe

windows10-2004-x64

Sharing

General

Target

170ff441c07ed2da039aaee890a71020_JaffaCakes118
Size

646KB
Sample

240627-w6eqjawfpr
MD5

170ff441c07ed2da039aaee890a71020
SHA1

1a2faec4551e7ad3bcaa619932d149a1fc1b2e2b
SHA256

918b3f5a2c52068990fcce16d25f3e4454f375aceb00cefaaa8fda086bb815cf
SHA512

3205f8198b375f8dc07c8c9da5dc822c7202795ba476a7aba8b69b5ecf324455d90f48c3fcfe669170acaa204176989aab09adb08f95dd84300e8d5b93a66115
SSDEEP

12288:A8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORixC:5UKoN0bUxgGa/pfBHDb+y1HgZw

Score

10^/10

darkcomet rat trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

170ff441c07ed2da039aaee890a71020_JaffaCakes118.exe

Resource

win7-20240220-en

darkcomet rat trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

170ff441c07ed2da039aaee890a71020_JaffaCakes118.exe

Resource

win10v2004-20240611-en

darkcomet rat trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Targets

- Target
  
  170ff441c07ed2da039aaee890a71020_JaffaCakes118
- Size
  
  646KB
- MD5
  
  170ff441c07ed2da039aaee890a71020
- SHA1
  
  1a2faec4551e7ad3bcaa619932d149a1fc1b2e2b
- SHA256
  
  918b3f5a2c52068990fcce16d25f3e4454f375aceb00cefaaa8fda086bb815cf
- SHA512
  
  3205f8198b375f8dc07c8c9da5dc822c7202795ba476a7aba8b69b5ecf324455d90f48c3fcfe669170acaa204176989aab09adb08f95dd84300e8d5b93a66115
- SSDEEP
  
  12288:A8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORixC:5UKoN0bUxgGa/pfBHDb+y1HgZw
Score

10^/10

darkcomet rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

darkcometrattrojan

behavioral2

darkcometrattrojan

© 2018-2024

Terms | Privacy