Extracted

• • Target

    56aaa4671f57bd402137d0f6c1af513f_JaffaCakes118

  • Size

    660KB

  • MD5

    56aaa4671f57bd402137d0f6c1af513f

  • SHA1

    1ba79eeb3b34b6256e949b7013e880ddfa2f897a

  • SHA256

    305a3aa1f047b52667a2a5eaeca9e7bd0d645d5826bf815dfa93a674d9075662

  • SHA512

    34a20134353f44763552af8cdd11c631272b81a1c4aad3818e69c00cac71219c044de8459efc0bd7bd1868aab5696acae0e47b0c6125f1eec707507b23f22a59

  • SSDEEP

    12288:QXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452U6:2nAw2WWeFcfbP9VPSPMTSPL/rWvzq4JK

  Score

  10^/10

  darkcometdarkcometdiscoveryevasionrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Sets file to hidden

    Modifies file attributes to stop it showing in Explorer etc.

    evasion

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2