Overview

overview

10

Static

static

3

bcbb23159e...18.exe

windows7-x64

10

bcbb23159e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bcbb23159e37d1ad9ace10a71d911666_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241203-lccc7sypfs

  • MD5

    bcbb23159e37d1ad9ace10a71d911666

  • SHA1

    1eb96604ba38f71c0703025bc61fc9536870f229

  • SHA256

    0dde97f2e1ddb3f648401610b75c2d232913eede48efd1cdb5ca064b41479f81

  • SHA512

    b0f53bae599d15b37db1a3f8c47ed89064cde3550ee530c383b79d09f944224ff014accea8da97482f2e6e8285e0ac66fb709b6b49651476a2377106e3790ca5

  • SSDEEP

    12288:5sMwXUna2kGYrKg6+hBIlngZWQbz8DvrtgTmzF7FLuc3j2rn4gVGBgi3/XV9vMIx:mxK0BBSvrWmhZ04gV4fXNCc7zUI4DG

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      bcbb23159e37d1ad9ace10a71d911666_JaffaCakes118

    • Size

      1.2MB

    • MD5

      bcbb23159e37d1ad9ace10a71d911666

    • SHA1

      1eb96604ba38f71c0703025bc61fc9536870f229

    • SHA256

      0dde97f2e1ddb3f648401610b75c2d232913eede48efd1cdb5ca064b41479f81

    • SHA512

      b0f53bae599d15b37db1a3f8c47ed89064cde3550ee530c383b79d09f944224ff014accea8da97482f2e6e8285e0ac66fb709b6b49651476a2377106e3790ca5

    • SSDEEP

      12288:5sMwXUna2kGYrKg6+hBIlngZWQbz8DvrtgTmzF7FLuc3j2rn4gVGBgi3/XV9vMIx:mxK0BBSvrWmhZ04gV4fXNCc7zUI4DG

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks