Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-06-2024 08:21

General

  • Target

    154e078a01c64594670fc142909254ee_JaffaCakes118.exe

  • Size

    723KB

  • MD5

    154e078a01c64594670fc142909254ee

  • SHA1

    22cae4c77eb6e3ff4163b39b65dafceb935e1f11

  • SHA256

    7c76299e3ac43fd7282eb0a981138f2e4e8a6521cc2ba7486049c8c92ad68900

  • SHA512

    323d1ac93b1676834c21d267f23a0e08aced1677fe939cc8d205d3a49da3c834729799a7f31983cfae16da1e5908093481732653cb8aa7bbdd70ba8968a3c172

  • SSDEEP

    12288:7FLlJnnbWOtz6sVJhvaz1Qc/WdI//vfM4qwrbkniafBo6vnTylKM/q9jJr:Z3nbWmJVJFwSddIXvfhqbia/v2jq9V

Score
10/10

Malware Config

Signatures

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

Processes

  • C:\Users\Admin\AppData\Local\Temp\154e078a01c64594670fc142909254ee_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\154e078a01c64594670fc142909254ee_JaffaCakes118.exe"
    1⤵
      PID:2112

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2112-0-0x0000000000400000-0x00000000004C3000-memory.dmp

      Filesize

      780KB