Overview

overview

10

Static

static

10

1455930b85...18.exe

windows7-x64

10

1455930b85...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1455930b855191d44414e963a71bd9b0_JaffaCakes118

  • Size

    689KB

  • Sample

    240504-y5fbsaac31

  • MD5

    1455930b855191d44414e963a71bd9b0

  • SHA1

    9f3133d0fc6f74b98548a6a0a1afb18b9d2dd97b

  • SHA256

    deac2e2bd0c58760d00e4459117b9ea27dfeffeb0d9ae05c39912ca077d281e4

  • SHA512

    892fe0ee002b11873f648483746172eecb4da405bef847f0bee93a17b112eae4d81aabf97db4c2884fc56e8469fd5e7f158613d652c5304f09c5d28abbd421ac

  • SSDEEP

    12288:s9AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LmIl:6AQ6Zx9cxTmOrucTIEFSpOi

Score
10/10
darkcometrattrojan

Malware Config

Targets

    • Target

      1455930b855191d44414e963a71bd9b0_JaffaCakes118

    • Size

      689KB

    • MD5

      1455930b855191d44414e963a71bd9b0

    • SHA1

      9f3133d0fc6f74b98548a6a0a1afb18b9d2dd97b

    • SHA256

      deac2e2bd0c58760d00e4459117b9ea27dfeffeb0d9ae05c39912ca077d281e4

    • SHA512

      892fe0ee002b11873f648483746172eecb4da405bef847f0bee93a17b112eae4d81aabf97db4c2884fc56e8469fd5e7f158613d652c5304f09c5d28abbd421ac

    • SSDEEP

      12288:s9AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LmIl:6AQ6Zx9cxTmOrucTIEFSpOi

    Score
    10/10
    darkcometrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks