Extracted

• • Target

    45c7ee4bed00a5fd364b477e874fc849_JaffaCakes118

  • Size

    383KB

  • MD5

    45c7ee4bed00a5fd364b477e874fc849

  • SHA1

    b5f3d363663b4a30302f7aa0bd71a091b9c72c04

  • SHA256

    efa221bd1f00a64e77ac1963987bd7a2ec1b96cb449970d0f01c98938ebdb6a4

  • SHA512

    d3dc25bbc2f0a76dc27691c334d9602d268622bcf509665bc9c4442bdab67b9b983bf4a33b8aa7a9efc004d79989beb7067d0f9d4c18c7358fadd12e4a7c1001

  • SSDEEP

    6144:szLhp3fD0scN5iULQQTFwK2BA/iV3W7x/JkpnyG88HpdFIB0MDXMe7uLZ1IMGIGW:khpvotN5VLQQKeiLyG8afFC0MDXMe7OH

  Score

  10^/10

  darkcometguest16discoveryrattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2