General

  • Target

    66bc7f7fdcb27939e0f3e3abfbbbbcfc

  • Size

    323KB

  • Sample

    240119-fenw5afge7

  • MD5

    66bc7f7fdcb27939e0f3e3abfbbbbcfc

  • SHA1

    1c977a5869249a61a8a3f5b79a2d6a068151c59d

  • SHA256

    835b7199502ab50d86791e55539d95e52518bc090dfea6b45005a35eef34e4e0

  • SHA512

    69abcdfd8d360e952d08da6a2dc509b98e711446b4bd9befdeafe514922b666cf438a84cf8cce41d6653dc4313adcef2da453e52d5c337723331d9cbd91b5eb9

  • SSDEEP

    6144:Hva/giBihpLigYEwGUyLiyLguCRZbxMwXSmd95EHovp4V:HSYzOgYEwGUyLidumVRJx4V

Malware Config

Targets

    • Target

      66bc7f7fdcb27939e0f3e3abfbbbbcfc

    • Size

      323KB

    • MD5

      66bc7f7fdcb27939e0f3e3abfbbbbcfc

    • SHA1

      1c977a5869249a61a8a3f5b79a2d6a068151c59d

    • SHA256

      835b7199502ab50d86791e55539d95e52518bc090dfea6b45005a35eef34e4e0

    • SHA512

      69abcdfd8d360e952d08da6a2dc509b98e711446b4bd9befdeafe514922b666cf438a84cf8cce41d6653dc4313adcef2da453e52d5c337723331d9cbd91b5eb9

    • SSDEEP

      6144:Hva/giBihpLigYEwGUyLiyLguCRZbxMwXSmd95EHovp4V:HSYzOgYEwGUyLidumVRJx4V

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Windows security bypass

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Windows security modification

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks