Overview

overview

10

Static

static

3

1cba823549...18.exe

windows7-x64

10

1cba823549...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1cba823549cc492590f9a63a0ff9a971_JaffaCakes118

  • Size

    3.4MB

  • Sample

    241007-lk9nnsscmh

  • MD5

    1cba823549cc492590f9a63a0ff9a971

  • SHA1

    dfb099c24c29a4706e2e92c20c0d4e177b32c46f

  • SHA256

    e74276689549168d457803f59964528d9da99cc972fde7e026ffb3e33010d14e

  • SHA512

    3d18ed6a0bacc6037e2f333e74db2f5d702181b80943775712151456141cebfc9f8fe463861bbd29714fd3ecdba780209e221a4a3ef2a9cce8fcefc7dfd787cc

  • SSDEEP

    49152:y/I7eTL3xa9U5SOYyx5x8CBNaTXk+tLFlJm+z55b:d

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      1cba823549cc492590f9a63a0ff9a971_JaffaCakes118

    • Size

      3.4MB

    • MD5

      1cba823549cc492590f9a63a0ff9a971

    • SHA1

      dfb099c24c29a4706e2e92c20c0d4e177b32c46f

    • SHA256

      e74276689549168d457803f59964528d9da99cc972fde7e026ffb3e33010d14e

    • SHA512

      3d18ed6a0bacc6037e2f333e74db2f5d702181b80943775712151456141cebfc9f8fe463861bbd29714fd3ecdba780209e221a4a3ef2a9cce8fcefc7dfd787cc

    • SSDEEP

      49152:y/I7eTL3xa9U5SOYyx5x8CBNaTXk+tLFlJm+z55b:d

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks