darkcomet | 4cf2688a0f87099ad71f1d3adb73e0348ed317c34f4eb304d13c198e2b2aa269 | Triage

Submit
Reports

Overview

overview

Static

static

2505f4b1e0...18.exe

windows7-x64

2505f4b1e0...18.exe

windows10-2004-x64

Sharing

General

Target

2505f4b1e0e2b6954ee6fb25c45e5549_JaffaCakes118
Size

660KB
Sample

240704-hqrhha1hpd
MD5

2505f4b1e0e2b6954ee6fb25c45e5549
SHA1

02833d0d60891970c51bee7f4dcf4cd44fcda89d
SHA256

4cf2688a0f87099ad71f1d3adb73e0348ed317c34f4eb304d13c198e2b2aa269
SHA512

06c55c281b01e68422ff1770452ee0af65248ff211b622f1bf76dfa6732d05096db1c8df70a90ab5e6202381e0c60ff7cdd78d0b072b679afcec1b2807ba82cf
SSDEEP

12288:gXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1FZw4JuMksh/fy452UG:mnAw2WWeFcfbP9VPSPMTSPL/rWvTq4J2

Score

10^/10

darkcomet guest16 rat trojan

Static task

static1

guest16 darkcomet

2 signatures

Behavioral task

behavioral1

Sample

2505f4b1e0e2b6954ee6fb25c45e5549_JaffaCakes118.exe

Resource

win7-20240611-en

darkcomet guest16 rat trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

2505f4b1e0e2b6954ee6fb25c45e5549_JaffaCakes118.exe

Resource

win10v2004-20240508-en

darkcomet guest16 rat trojan

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-F54S21D

Attributes

gencode
LPw0ZWpiRHxR
install
false
offline_keylogger
true
persistence
false

Targets

- Target
  
  2505f4b1e0e2b6954ee6fb25c45e5549_JaffaCakes118
- Size
  
  660KB
- MD5
  
  2505f4b1e0e2b6954ee6fb25c45e5549
- SHA1
  
  02833d0d60891970c51bee7f4dcf4cd44fcda89d
- SHA256
  
  4cf2688a0f87099ad71f1d3adb73e0348ed317c34f4eb304d13c198e2b2aa269
- SHA512
  
  06c55c281b01e68422ff1770452ee0af65248ff211b622f1bf76dfa6732d05096db1c8df70a90ab5e6202381e0c60ff7cdd78d0b072b679afcec1b2807ba82cf
- SSDEEP
  
  12288:gXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1FZw4JuMksh/fy452UG:mnAw2WWeFcfbP9VPSPMTSPL/rWvTq4J2
Score

10^/10

darkcomet guest16 rat trojan
- Darkcomet
  DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
  trojan rat darkcomet
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

guest16darkcomet

behavioral1

darkcometguest16rattrojan

behavioral2

darkcometguest16rattrojan

© 2018-2024

Terms | Privacy