General

  • Target

    b2a3c6c14bd40b1f1caf80efa13fd82b_JaffaCakes118

  • Size

    634KB

  • Sample

    240821-jlavma1arn

  • MD5

    b2a3c6c14bd40b1f1caf80efa13fd82b

  • SHA1

    04d03fe62a5ce0ffa200603199535e47cf5cd8fe

  • SHA256

    08d40fde03aacb0747bfb6fb385d357fdb5b52af4230f96c578ff2ed30d9c210

  • SHA512

    559559e00681383c3f4eace906242a4c7601930f8e409e27ec244425e7c644cb85780c5c0230862cffca7074b1a7e1362bc93ed687a154b320299349103b7ffe

  • SSDEEP

    12288:ApwABK90BOe/x9lPAYvxPQVjdsAY2XjWlnlQTMMXG91uhKIXn/:6wAcu99lPzvxP+Bsz2XjWTGMQckkIXn

Malware Config

Targets

    • Target

      b2a3c6c14bd40b1f1caf80efa13fd82b_JaffaCakes118

    • Size

      634KB

    • MD5

      b2a3c6c14bd40b1f1caf80efa13fd82b

    • SHA1

      04d03fe62a5ce0ffa200603199535e47cf5cd8fe

    • SHA256

      08d40fde03aacb0747bfb6fb385d357fdb5b52af4230f96c578ff2ed30d9c210

    • SHA512

      559559e00681383c3f4eace906242a4c7601930f8e409e27ec244425e7c644cb85780c5c0230862cffca7074b1a7e1362bc93ed687a154b320299349103b7ffe

    • SSDEEP

      12288:ApwABK90BOe/x9lPAYvxPQVjdsAY2XjWlnlQTMMXG91uhKIXn/:6wAcu99lPzvxP+Bsz2XjWTGMQckkIXn

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks