General

  • Target

    21066c00de752ffa1fe224ba7fc5853c_JaffaCakes118

  • Size

    760KB

  • Sample

    241008-mdtjjsvbra

  • MD5

    21066c00de752ffa1fe224ba7fc5853c

  • SHA1

    05fa88cf992a0a5c3872a5a3814e82de21c398e0

  • SHA256

    004c48195399bc6471e98e129bf98e7a6d21560107fcdb2ac58c7644770e4112

  • SHA512

    de1d800ce0510817ce5eff866a43eb2439d8309ba5e27e23b45bedd3649685d781e4f34ccb7a5c86bf17698c54d843f7b07cd4d68446ffd5c9bae5cf6e070b1f

  • SSDEEP

    12288:h4dMRU/UP4heFjLDFtvoSZiUXZRY49SA7GI/p7a6o2Mhi9Byu8QFIAaWfaydp9pB:qwU/UwhWv1XZpSRSJo2xByuPIA7Pdp9b

Malware Config

Targets

    • Target

      21066c00de752ffa1fe224ba7fc5853c_JaffaCakes118

    • Size

      760KB

    • MD5

      21066c00de752ffa1fe224ba7fc5853c

    • SHA1

      05fa88cf992a0a5c3872a5a3814e82de21c398e0

    • SHA256

      004c48195399bc6471e98e129bf98e7a6d21560107fcdb2ac58c7644770e4112

    • SHA512

      de1d800ce0510817ce5eff866a43eb2439d8309ba5e27e23b45bedd3649685d781e4f34ccb7a5c86bf17698c54d843f7b07cd4d68446ffd5c9bae5cf6e070b1f

    • SSDEEP

      12288:h4dMRU/UP4heFjLDFtvoSZiUXZRY49SA7GI/p7a6o2Mhi9Byu8QFIAaWfaydp9pB:qwU/UwhWv1XZpSRSJo2xByuPIA7Pdp9b

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks