General

  • Target

    JaffaCakes118_77c6a710a001c3dd7577b0cb90af6e8a

  • Size

    335KB

  • Sample

    250104-fnnygstkaz

  • MD5

    77c6a710a001c3dd7577b0cb90af6e8a

  • SHA1

    8ad9866df27310e289f572cbee31b64a6f00b611

  • SHA256

    86de20b31d0a51b3fc912a7e0941a9b02cc1874ed09c9334258c43d4364abc36

  • SHA512

    e05a76843eb5a889c1c0fd242b8ef8eaa96ff108fa658d008fafafb7144d95a71d7e75265a2af2d5cade71f22bb1aac2345f5d0dcd71e173b93408bd5e69c1f1

  • SSDEEP

    6144:2gjE26cdCJCdabpH435ebKV84TA0lzquL8crc2fgwYcV9U:vOWalH4wbiZDL8Kc2fgx

Malware Config

Targets

    • Target

      JaffaCakes118_77c6a710a001c3dd7577b0cb90af6e8a

    • Size

      335KB

    • MD5

      77c6a710a001c3dd7577b0cb90af6e8a

    • SHA1

      8ad9866df27310e289f572cbee31b64a6f00b611

    • SHA256

      86de20b31d0a51b3fc912a7e0941a9b02cc1874ed09c9334258c43d4364abc36

    • SHA512

      e05a76843eb5a889c1c0fd242b8ef8eaa96ff108fa658d008fafafb7144d95a71d7e75265a2af2d5cade71f22bb1aac2345f5d0dcd71e173b93408bd5e69c1f1

    • SSDEEP

      6144:2gjE26cdCJCdabpH435ebKV84TA0lzquL8crc2fgwYcV9U:vOWalH4wbiZDL8Kc2fgx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks