Overview

overview

10

Static

static

3

84d59b4146...18.exe

windows7-x64

10

84d59b4146...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84d59b41460cf7de8ff4c32ebdaf95d8_JaffaCakes118

  • Size

    855KB

  • Sample

    241102-f3mzqs1lck

  • MD5

    84d59b41460cf7de8ff4c32ebdaf95d8

  • SHA1

    1a59e802be248c0c284929b6fa517f442c6fb730

  • SHA256

    b2a9333b9fb6854f9864f805be86e78e6554ec5efdeb5cfee4e6fd951f4e5f7c

  • SHA512

    587ac9ef5c7c45f958196afbb2bdf3cefc1754beccd9a8f9c2fc44450463bfd6ff2361dd6cb77ac64655ca23bd0a265c5c44f4c68c3b08cc63c141455bfa60d4

  • SSDEEP

    24576:6+8f6opsOTHQgitwCr/7L2tdGCIT1T1pqeWp3A9:78fRptHQgY3r/7LGdGzTRPJWK9

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      84d59b41460cf7de8ff4c32ebdaf95d8_JaffaCakes118

    • Size

      855KB

    • MD5

      84d59b41460cf7de8ff4c32ebdaf95d8

    • SHA1

      1a59e802be248c0c284929b6fa517f442c6fb730

    • SHA256

      b2a9333b9fb6854f9864f805be86e78e6554ec5efdeb5cfee4e6fd951f4e5f7c

    • SHA512

      587ac9ef5c7c45f958196afbb2bdf3cefc1754beccd9a8f9c2fc44450463bfd6ff2361dd6cb77ac64655ca23bd0a265c5c44f4c68c3b08cc63c141455bfa60d4

    • SSDEEP

      24576:6+8f6opsOTHQgitwCr/7L2tdGCIT1T1pqeWp3A9:78fRptHQgY3r/7LGdGzTRPJWK9

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks