Overview

overview

10

Static

static

10

8c6bae07a5...18.exe

windows7-x64

10

8c6bae07a5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c6bae07a598de3618a456a7a0ae1941_JaffaCakes118

  • Size

    714KB

  • Sample

    240811-3hzt5avajm

  • MD5

    8c6bae07a598de3618a456a7a0ae1941

  • SHA1

    15766c72edc4356ed16d5d70b7418a6382e1c401

  • SHA256

    ade1f2bdb2c03ae68db5a077fd9b89f886706ef15e6619428508fef336a218e0

  • SHA512

    dc7d082d9b1715fe37429db4162d3f5c51a6fd8e53f82cb0c0fa0b28e5576ae09d36c7809fd9c4c90bb99d59ea185d5326313777700604ebbdf02aff340b4e4f

  • SSDEEP

    12288:CaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdJ:TAEENIq8XwyVPQclDq/+WnpsSJ

Score
10/10
darkcometdiscoverypersistencerattrojan

Malware Config

Targets

    • Target

      8c6bae07a598de3618a456a7a0ae1941_JaffaCakes118

    • Size

      714KB

    • MD5

      8c6bae07a598de3618a456a7a0ae1941

    • SHA1

      15766c72edc4356ed16d5d70b7418a6382e1c401

    • SHA256

      ade1f2bdb2c03ae68db5a077fd9b89f886706ef15e6619428508fef336a218e0

    • SHA512

      dc7d082d9b1715fe37429db4162d3f5c51a6fd8e53f82cb0c0fa0b28e5576ae09d36c7809fd9c4c90bb99d59ea185d5326313777700604ebbdf02aff340b4e4f

    • SSDEEP

      12288:CaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVsgdJ:TAEENIq8XwyVPQclDq/+WnpsSJ

    Score
    10/10
    darkcometdiscoverypersistencerattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Modifies WinLogon for persistence

      persistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks