Overview

overview

10

Static

static

10

5997d3d363...18.exe

windows7-x64

10

5997d3d363...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5997d3d363834fd18a0a3295cd139069_JaffaCakes118

  • Size

    776KB

  • Sample

    241018-12gfsashjk

  • MD5

    5997d3d363834fd18a0a3295cd139069

  • SHA1

    902004ad30a42685637fc248288e7ae970398078

  • SHA256

    e9ea71bbc7a83a1745464586854b571a1f09c553865f1f5f7fc32eeccf452037

  • SHA512

    8b00e9f893ef6da2213dd84ea5e65468a941d215b3856e884126532b157c007571a3312799f23449cccd36f8c0f108bac20e54ec8b7c19e66f3c9e4c584f04b6

  • SSDEEP

    12288:29AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LqnKEW:MAQ6Zx9cxTmOrucTIEFSpOGpW

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      5997d3d363834fd18a0a3295cd139069_JaffaCakes118

    • Size

      776KB

    • MD5

      5997d3d363834fd18a0a3295cd139069

    • SHA1

      902004ad30a42685637fc248288e7ae970398078

    • SHA256

      e9ea71bbc7a83a1745464586854b571a1f09c553865f1f5f7fc32eeccf452037

    • SHA512

      8b00e9f893ef6da2213dd84ea5e65468a941d215b3856e884126532b157c007571a3312799f23449cccd36f8c0f108bac20e54ec8b7c19e66f3c9e4c584f04b6

    • SSDEEP

      12288:29AFlAd0Z+89cxTGzO4AucTD8QP2lmFSrVs9LqnKEW:MAQ6Zx9cxTmOrucTIEFSpOGpW

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks