Extracted

• • Target

    368648a18d6d9b33925e0a264eefa2e2_JaffaCakes118

  • Size

    909KB

  • MD5

    368648a18d6d9b33925e0a264eefa2e2

  • SHA1

    8c5d79378613f9786f415c7e9a8af56c95e11a97

  • SHA256

    d8376ad7bf98de597138ed0ef4188a5139c9546f398cf0f88fbc745cdca4042b

  • SHA512

    336589a3a08b295773909d92498fb1c808810a8df14b24e4d02b8b36b3877ff764935be4d7546c6332b6a96247458899450e0dd3e1ff90442bc5fb1067029982

  • SSDEEP

    24576:jlGMTVz70tQzJCLWDVrGJt6wUMdzO11FAx02O:jlGMT5wtQAyRuY7D

  Score

  10^/10

  darkcometguest16discoverypersistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2