Overview

overview

10

Static

static

3

6dc8407ba8...18.exe

windows7-x64

10

6dc8407ba8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6dc8407ba82ec9c53b926ba1d6992387_JaffaCakes118

  • Size

    499KB

  • Sample

    241023-jnnjhaydpe

  • MD5

    6dc8407ba82ec9c53b926ba1d6992387

  • SHA1

    c5ca320304193b41b49441abcaa04351b055982d

  • SHA256

    981ce7959633db1883f12966d8ba7c8bce13ff57a8916fd87a6bbe2dea43cfac

  • SHA512

    95a695ff30bcaefd12a495e39a2983af489039388c96ce382f157b49fda4b1ba140c9fdb8d4b6d132979b161f695658f76f363e673fe1300b5972d39fbc1c337

  • SSDEEP

    12288:Jeckb5KEhacLYenfEMB65lltl52hc3DmJmHw:Jeckb5rhxRn88WrZsZKw

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      6dc8407ba82ec9c53b926ba1d6992387_JaffaCakes118

    • Size

      499KB

    • MD5

      6dc8407ba82ec9c53b926ba1d6992387

    • SHA1

      c5ca320304193b41b49441abcaa04351b055982d

    • SHA256

      981ce7959633db1883f12966d8ba7c8bce13ff57a8916fd87a6bbe2dea43cfac

    • SHA512

      95a695ff30bcaefd12a495e39a2983af489039388c96ce382f157b49fda4b1ba140c9fdb8d4b6d132979b161f695658f76f363e673fe1300b5972d39fbc1c337

    • SSDEEP

      12288:Jeckb5KEhacLYenfEMB65lltl52hc3DmJmHw:Jeckb5rhxRn88WrZsZKw

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks