General

  • Target

    3e985bdc5f361dd3888e297a16954ef7_JaffaCakes118

  • Size

    743KB

  • Sample

    241013-jf858szcqr

  • MD5

    3e985bdc5f361dd3888e297a16954ef7

  • SHA1

    155fc36725ba673639801b010bd08c0f1e8be20b

  • SHA256

    7c87cdb90f0d491daae2eccd5086369be8c6bedf0a64949fbdef56b9b669e952

  • SHA512

    fd47445e80bd395309092642a69a1e39b32c3a07adf197276061732a87d3e8482984454620a82f32c87cf2438afcff955030c7decb657b7364bcce22f364b7d5

  • SSDEEP

    12288:pb6irgErd6tBwz0b4EQboJoMzv2Q5nWQBiroq40oDqV77nu3PbQoh:p+Mh0M0cUJpeQrAsmV77uTQi

Malware Config

Targets

    • Target

      3e985bdc5f361dd3888e297a16954ef7_JaffaCakes118

    • Size

      743KB

    • MD5

      3e985bdc5f361dd3888e297a16954ef7

    • SHA1

      155fc36725ba673639801b010bd08c0f1e8be20b

    • SHA256

      7c87cdb90f0d491daae2eccd5086369be8c6bedf0a64949fbdef56b9b669e952

    • SHA512

      fd47445e80bd395309092642a69a1e39b32c3a07adf197276061732a87d3e8482984454620a82f32c87cf2438afcff955030c7decb657b7364bcce22f364b7d5

    • SSDEEP

      12288:pb6irgErd6tBwz0b4EQboJoMzv2Q5nWQBiroq40oDqV77nu3PbQoh:p+Mh0M0cUJpeQrAsmV77uTQi

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks