Extracted

Extracted

• • Target

    f7fde5fd9701a66a2278c15cb93d64a4_JaffaCakes118

  • Size

    1.1MB

  • MD5

    f7fde5fd9701a66a2278c15cb93d64a4

  • SHA1

    87e16c270fa099abc8730b6c71bb41fce3e56893

  • SHA256

    a0025a6cf0dfdaa08349dbe3e13264d24e2b8f8d6f43f99ba5427c7de6c1f93c

  • SHA512

    810577649f7699ed58e024023cf56945ae9d1f1cb6d29ba09f39c3fbcce3afab35e511cdf98587ab9c0eb0d8e0c7fc29518c6c8582cdd3960ba2fe69188e5d1c

  • SSDEEP

    24576:jthEVaPqLvupTc6GT42PVIKMRpSEKZsvWXzlwyN6Mug3iqw:3EVUcAcjWK+sTQo5w0B3E

  Score

  10^/10

  darkcometlatentbotpedodiscoverypersistencerattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Adds Run key to start application

    persistence

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2