General

  • Target

    JaffaCakes118_77e811aef96306ea62013541fce950e6

  • Size

    745KB

  • Sample

    250104-f6q6kawqhm

  • MD5

    77e811aef96306ea62013541fce950e6

  • SHA1

    17abbd773f7cb47cdfb683fa7739d17853b72d8c

  • SHA256

    757db600db5d8b891aa64d3ad7fa14dcab3e437700765c6a026d57601d65de3e

  • SHA512

    661dc179a662facf2443c66cdbb088a709fca183160c10d0a27b3fafe068e89bb27d77612cf472ae209e58ebffd7a83bcbf73a1192781fc93c2af13184827b50

  • SSDEEP

    12288:oaAchpWsuVTv7ItY8XljyypHb3cOLBev03hlULsmWZ++09ZcKDVsgdBl:JAEENIq8XwyVbMclDq/+WnpsS

Malware Config

Targets

    • Target

      JaffaCakes118_77e811aef96306ea62013541fce950e6

    • Size

      745KB

    • MD5

      77e811aef96306ea62013541fce950e6

    • SHA1

      17abbd773f7cb47cdfb683fa7739d17853b72d8c

    • SHA256

      757db600db5d8b891aa64d3ad7fa14dcab3e437700765c6a026d57601d65de3e

    • SHA512

      661dc179a662facf2443c66cdbb088a709fca183160c10d0a27b3fafe068e89bb27d77612cf472ae209e58ebffd7a83bcbf73a1192781fc93c2af13184827b50

    • SSDEEP

      12288:oaAchpWsuVTv7ItY8XljyypHb3cOLBev03hlULsmWZ++09ZcKDVsgdBl:JAEENIq8XwyVbMclDq/+WnpsS

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks