Extracted

• • Target

    ea30c741e32c22ab9cb3ef5d17b24caf_JaffaCakes118

  • Size

    1.7MB

  • MD5

    ea30c741e32c22ab9cb3ef5d17b24caf

  • SHA1

    a222dae3d659aed9fd20d937b756aa58a923fb62

  • SHA256

    918aec7c1dff8f8de581d2fd68dc20c8b8ae0e64192ffb078149bbd6c4f78aa8

  • SHA512

    8083749812fce816cd4c0234e454c60e527f1f6c2ba281f9fc706034d06e111597b841b39ec119958643499d05604fa7ca9745ccac78290800de472aa9991d81

  • SSDEEP

    24576:7WX0yMrt2ufZeG0TOBJkSsG450g6W41JU5mKUIr60bOCJb:XB2P4ggURhOC

  Score

  10^/10

  darkcometguest16_mindiscoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2