Overview

overview

10

Static

static

3

68daf9cf93...18.exe

windows7-x64

10

68daf9cf93...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68daf9cf93602dc656e1272f776ecfc0_JaffaCakes118

  • Size

    460KB

  • Sample

    241022-etf96awhjb

  • MD5

    68daf9cf93602dc656e1272f776ecfc0

  • SHA1

    13f66b781afa60761d2d3ad1c4c6eb87aaa983c8

  • SHA256

    7302741b76ccec716edaa8c87dda86eb3902d8b2b7318ead6fd5a78e33215720

  • SHA512

    d16a9c13e4ed5c83c10e00608ec80492fb0260529fd9bce6a5e436e64f6bfac7c05af5d44af88e9b2e67d3a5d71e1efca4b8709c77045170d3a90966b4db9673

  • SSDEEP

    12288:VThkYfoS5x9rVFyDosH3fxi7EN8bH3AOzCl:VmU/5x95G9x7N61A

Score
10/10
darkcometdiscoveryrattrojanupx

Malware Config

Targets

    • Target

      68daf9cf93602dc656e1272f776ecfc0_JaffaCakes118

    • Size

      460KB

    • MD5

      68daf9cf93602dc656e1272f776ecfc0

    • SHA1

      13f66b781afa60761d2d3ad1c4c6eb87aaa983c8

    • SHA256

      7302741b76ccec716edaa8c87dda86eb3902d8b2b7318ead6fd5a78e33215720

    • SHA512

      d16a9c13e4ed5c83c10e00608ec80492fb0260529fd9bce6a5e436e64f6bfac7c05af5d44af88e9b2e67d3a5d71e1efca4b8709c77045170d3a90966b4db9673

    • SSDEEP

      12288:VThkYfoS5x9rVFyDosH3fxi7EN8bH3AOzCl:VmU/5x95G9x7N61A

    Score
    10/10
    darkcometdiscoveryrattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks