Extracted

• • Target

    fc4ddea530787f879cf6b5452fb305f4_JaffaCakes118

  • Size

    1.1MB

  • MD5

    fc4ddea530787f879cf6b5452fb305f4

  • SHA1

    18628bbca66daf23a54e3607e00c815c97b328cb

  • SHA256

    2507bbacbc3ab3348d18f4e3e260aa9b7ffe5737d47648761f4bb87919d2a6c1

  • SHA512

    1a7e30daef526bd2fb8ca804b6a6278c833735e4b64c5c620efbf5d09f81503c8759cedd02eb5f658b68e483232a242bba6b850e561fbfe1a7641ee43014a7fc

  • SSDEEP

    24576:ClQkTf4S/EEUrhJGK5xpB98DClF3HzSK1y2e:9kTgl06n8DCb3zJze

  Score

  10^/10

  darkcometguest16persistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Uses the VBS compiler for execution

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2