Overview

overview

10

Static

static

3

95a4ad0f5c...18.exe

windows7-x64

10

95a4ad0f5c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95a4ad0f5c5121b0b801d62d0f3f0702_JaffaCakes118

  • Size

    670KB

  • Sample

    241124-s52bcswpdx

  • MD5

    95a4ad0f5c5121b0b801d62d0f3f0702

  • SHA1

    40c2f869fe3cb15d94fca2eb2de03984908194b9

  • SHA256

    7c3c6097da3ca430c6432997bb3fe2094b50a559dd5bf5abd3cd186a051fa4fc

  • SHA512

    c9af177e44546d7812279cbc05a60ca8345774f5748b4729c33347ca50096891efe6b360a5520fe0c5ae39255ddc254a2aea48ff6b9d36a6d90a292338758ae7

  • SSDEEP

    12288:cNIKoESPZ1svriLF6K27uKeU7ylXuZxwjXHbw4F1:cNK0vrmWbn7ywnuXs4z

Score
10/10
darkcometdiscoverypersistencerattrojan

Malware Config

Targets

    • Target

      95a4ad0f5c5121b0b801d62d0f3f0702_JaffaCakes118

    • Size

      670KB

    • MD5

      95a4ad0f5c5121b0b801d62d0f3f0702

    • SHA1

      40c2f869fe3cb15d94fca2eb2de03984908194b9

    • SHA256

      7c3c6097da3ca430c6432997bb3fe2094b50a559dd5bf5abd3cd186a051fa4fc

    • SHA512

      c9af177e44546d7812279cbc05a60ca8345774f5748b4729c33347ca50096891efe6b360a5520fe0c5ae39255ddc254a2aea48ff6b9d36a6d90a292338758ae7

    • SSDEEP

      12288:cNIKoESPZ1svriLF6K27uKeU7ylXuZxwjXHbw4F1:cNK0vrmWbn7ywnuXs4z

    Score
    10/10
    darkcometdiscoverypersistencerattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Modifies WinLogon for persistence

      persistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks