Overview

overview

10

Static

static

10

7cc895d047...18.exe

windows7-x64

10

7cc895d047...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7cc895d047ac69cd15f84099747f316a_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241029-1d3n4syqc1

  • MD5

    7cc895d047ac69cd15f84099747f316a

  • SHA1

    72c67a82b26d8cde16c0602138c358b01507a5ed

  • SHA256

    ce5854dac7f868e1dde06a0a2f6e45e72a8d5f321c57b65d9f55e56832230397

  • SHA512

    c2d0779af1ca641e31918b22079e53d1270a91c9df8e33fe967473e221e0d31aae6ec1198586cd3e812296fa431a5c83e66c75588b0c99f042103db70a987708

  • SSDEEP

    24576:JAEENIq8XwyVPQclDq/+WnpsSMdnSJpXOnUKRFt6:JAEsw722WnednQMnUKRF8

Score
10/10
darkcometdiscoverypersistencerattrojan

Malware Config

Targets

    • Target

      7cc895d047ac69cd15f84099747f316a_JaffaCakes118

    • Size

      1.2MB

    • MD5

      7cc895d047ac69cd15f84099747f316a

    • SHA1

      72c67a82b26d8cde16c0602138c358b01507a5ed

    • SHA256

      ce5854dac7f868e1dde06a0a2f6e45e72a8d5f321c57b65d9f55e56832230397

    • SHA512

      c2d0779af1ca641e31918b22079e53d1270a91c9df8e33fe967473e221e0d31aae6ec1198586cd3e812296fa431a5c83e66c75588b0c99f042103db70a987708

    • SSDEEP

      24576:JAEENIq8XwyVPQclDq/+WnpsSMdnSJpXOnUKRFt6:JAEsw722WnednQMnUKRF8

    Score
    10/10
    darkcometdiscoverypersistencerattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Modifies WinLogon for persistence

      persistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks