General

  • Target

    JaffaCakes118_451991ab46f0e17909e45f7b4a39c9c2

  • Size

    635KB

  • Sample

    250101-dqe29asnft

  • MD5

    451991ab46f0e17909e45f7b4a39c9c2

  • SHA1

    be5a4dc29130f6730c48e47151f0c100e10758b3

  • SHA256

    0a1816fc6655d886ac84514df59064b322c202e073d3f8c1e8d0570b2f593f3e

  • SHA512

    c862faeab9d489a21371bad8e9e8efb818258b554d546e1f54a9b711bada67e4b72e89927966bbc98eacfd420d86e045de32c563c8c0f5a04ca1f1b98edb6c3a

  • SSDEEP

    12288:QpwABK90BOe/x9lPAYvxPQVjdsAY2XjWlnlpTMMXG91uhKIXn/V:qwAcu99lPzvxP+Bsz2XjWTRMQckkIXnN

Malware Config

Targets

    • Target

      JaffaCakes118_451991ab46f0e17909e45f7b4a39c9c2

    • Size

      635KB

    • MD5

      451991ab46f0e17909e45f7b4a39c9c2

    • SHA1

      be5a4dc29130f6730c48e47151f0c100e10758b3

    • SHA256

      0a1816fc6655d886ac84514df59064b322c202e073d3f8c1e8d0570b2f593f3e

    • SHA512

      c862faeab9d489a21371bad8e9e8efb818258b554d546e1f54a9b711bada67e4b72e89927966bbc98eacfd420d86e045de32c563c8c0f5a04ca1f1b98edb6c3a

    • SSDEEP

      12288:QpwABK90BOe/x9lPAYvxPQVjdsAY2XjWlnlpTMMXG91uhKIXn/V:qwAcu99lPzvxP+Bsz2XjWTRMQckkIXnN

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks