Extracted

• • Target

    24b1352f5a83c1a4312d9f5107ab4c49_JaffaCakes118

  • Size

    251KB

  • MD5

    24b1352f5a83c1a4312d9f5107ab4c49

  • SHA1

    e7748fbc5d762ca129f1c5d5a63d12ef0bbe479f

  • SHA256

    9a8d9acaad5491f3bace47f75de44fcec18d966d9224c0c33b092de9f5ac5180

  • SHA512

    7595b8f840f587e53509e0f7127e5de48f0351ddacc38affbc92f1918e5b816fd83394bb6db8c13f387c768845e9ce7288610d183fd63953956573979a981ff7

  • SSDEEP

    6144:JcNYk1yuwEDBum3qYWnl0pd0EX3Zq2b6wfIDYm0PHQ:JcWkbgTYWnYnt/IDYhP

  Score

  10^/10

  darkcometguest16evasionrattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Modifies firewall policy service

    evasion

  • Disables RegEdit via registry modification

    evasion

  • Disables Task Manager via registry modification

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2