Extracted

• • Target

    299da6ce2146d30d0c48ff0fa3422677_JaffaCakes118

  • Size

    388KB

  • MD5

    299da6ce2146d30d0c48ff0fa3422677

  • SHA1

    eca769f84cffdcd16a1706e4dedf9e5863da3058

  • SHA256

    fcac0eac9cbef7839f39df6277e194488ba939f1e20ee6a3717ec2683260b589

  • SHA512

    10703304a7be9c4aee0301750f395d2390cbd46bf4e2fa83acf4d2d19bacd9f0e07a5c5bf979b14b715efa44b354a3727c30d5f3467d663ac8b36ee9c6450c7e

  • SSDEEP

    12288:7V+mzFI6zrRkDhI7RMY7RhI159Rup4fVV:78G9RdNMIg7yyVV

  Score

  10^/10

  darkcometlatentbotrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2