Overview

overview

10

Static

static

3

8fbd83dc81...18.exe

windows7-x64

10

8fbd83dc81...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8fbd83dc816c94550613d3224ff57280_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241104-hljl4awjht

  • MD5

    8fbd83dc816c94550613d3224ff57280

  • SHA1

    aecf122978d42252be280f2fc7efde085f7defd9

  • SHA256

    6a4b915b14136d4c5ccc1a606c5d8281a7c217c261e0215af759d8d7ea121de3

  • SHA512

    93ed5d86e31c1fd98e847c1f0c222c2cdc3c09d8cd222092010b23713134c60dd813aea0275c46b237bf807839576b2bd43db0cdb654f2eae10e735f8e5c7cd3

  • SSDEEP

    24576:A5ifoSQrNRWA2+h7UcwvrrULxWuiOEn5klx4qNRX:DZQ732+hAJrUWFOs2lpXX

Score
10/10
darkcometdiscoverypersistencerattrojanupx

Malware Config

Targets

    • Target

      8fbd83dc816c94550613d3224ff57280_JaffaCakes118

    • Size

      1.0MB

    • MD5

      8fbd83dc816c94550613d3224ff57280

    • SHA1

      aecf122978d42252be280f2fc7efde085f7defd9

    • SHA256

      6a4b915b14136d4c5ccc1a606c5d8281a7c217c261e0215af759d8d7ea121de3

    • SHA512

      93ed5d86e31c1fd98e847c1f0c222c2cdc3c09d8cd222092010b23713134c60dd813aea0275c46b237bf807839576b2bd43db0cdb654f2eae10e735f8e5c7cd3

    • SSDEEP

      24576:A5ifoSQrNRWA2+h7UcwvrrULxWuiOEn5klx4qNRX:DZQ732+hAJrUWFOs2lpXX

    Score
    10/10
    darkcometdiscoverypersistencerattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Modifies WinLogon for persistence

      persistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks