General

  • Target

    60083d4377d120366ae556715fcd62d7_JaffaCakes118

  • Size

    906KB

  • Sample

    240720-l28sps1ble

  • MD5

    60083d4377d120366ae556715fcd62d7

  • SHA1

    75ecd1e9311a26c7d50bea8c9b70b22009949f4b

  • SHA256

    501cb1893058d6cd8070d8ec38563030fcb9774688a7d757341fffc02e78277e

  • SHA512

    be5f2957957d1d7190cb0ea2bed195bf9da5d08944c4323502b915a94063b54df8ea301a1e24aa346e43b414af66757834295f41d7c6ff85e58bf576ab25b228

  • SSDEEP

    12288:CWJ3q1QWmLY7FMkvrYI76XFDEBQGG2dZx67NKjEoO/b9o:FlNLAYXXsG5KQho

Score
10/10

Malware Config

Targets

    • Target

      60083d4377d120366ae556715fcd62d7_JaffaCakes118

    • Size

      906KB

    • MD5

      60083d4377d120366ae556715fcd62d7

    • SHA1

      75ecd1e9311a26c7d50bea8c9b70b22009949f4b

    • SHA256

      501cb1893058d6cd8070d8ec38563030fcb9774688a7d757341fffc02e78277e

    • SHA512

      be5f2957957d1d7190cb0ea2bed195bf9da5d08944c4323502b915a94063b54df8ea301a1e24aa346e43b414af66757834295f41d7c6ff85e58bf576ab25b228

    • SSDEEP

      12288:CWJ3q1QWmLY7FMkvrYI76XFDEBQGG2dZx67NKjEoO/b9o:FlNLAYXXsG5KQho

    Score
    10/10
    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks