Overview

overview

10

Static

static

3

88fabbe973...18.exe

windows7-x64

10

88fabbe973...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88fabbe973974e054bd3f1499c684146_JaffaCakes118

  • Size

    618KB

  • Sample

    241103-byn9sa1enp

  • MD5

    88fabbe973974e054bd3f1499c684146

  • SHA1

    cfdb04b0cf3093fbae112318c9d283bd0055bbd4

  • SHA256

    de656fdeb6d650bb5cfb925fd062e124854a95540a4973dd5a8f6ef38b1c51a4

  • SHA512

    85db8e1ff05256c765331f45859959566057bd4dae69687ccdb2ed2a2809450f8210b616c434af7e734effd29a72e6f9b80031889fb2e00adeb5ad46e52ec50d

  • SSDEEP

    12288:sc8ZpLqJNwk/q3sN0Ip6itoKXhys+hwxCd0hGc:aZpuLwwq8BbowhysEwxpr

Score
10/10
darkcometdiscoveryevasionrattrojanupx

Malware Config

Targets

    • Target

      88fabbe973974e054bd3f1499c684146_JaffaCakes118

    • Size

      618KB

    • MD5

      88fabbe973974e054bd3f1499c684146

    • SHA1

      cfdb04b0cf3093fbae112318c9d283bd0055bbd4

    • SHA256

      de656fdeb6d650bb5cfb925fd062e124854a95540a4973dd5a8f6ef38b1c51a4

    • SHA512

      85db8e1ff05256c765331f45859959566057bd4dae69687ccdb2ed2a2809450f8210b616c434af7e734effd29a72e6f9b80031889fb2e00adeb5ad46e52ec50d

    • SSDEEP

      12288:sc8ZpLqJNwk/q3sN0Ip6itoKXhys+hwxCd0hGc:aZpuLwwq8BbowhysEwxpr

    Score
    10/10
    darkcometdiscoveryevasionrattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Modifies firewall policy service

      evasion

    • Modifies security service

      evasion

    • Windows security bypass

      evasiontrojan

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Windows security modification

      evasiontrojan

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks