Overview

overview

10

Static

static

3

70b81b1232...18.exe

windows7-x64

10

70b81b1232...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70b81b12327d7b02d9cc251b6fadd6ca_JaffaCakes118

  • Size

    1.0MB

  • Sample

    241023-zfbsqsyema

  • MD5

    70b81b12327d7b02d9cc251b6fadd6ca

  • SHA1

    4a652f8aa8e910a8a6798d71816ede3f08267f63

  • SHA256

    b604d93a3ca32c7e59cf72e7355e341fe380452af6acd31d6b3b23ba2dfe57bc

  • SHA512

    acff19b77d7d5df428dbc4ae2f0ab56154770cbf8ebff3d8def8096ead6add607e7876c92c2f17e1629859fe61a302f5527e1c5167512739f89e3eb796b401ee

  • SSDEEP

    24576:AaFvsoJtSc+q4u/7Ihh7LDM/AfCVuoTmYJ1e+:AkvD9M6

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      70b81b12327d7b02d9cc251b6fadd6ca_JaffaCakes118

    • Size

      1.0MB

    • MD5

      70b81b12327d7b02d9cc251b6fadd6ca

    • SHA1

      4a652f8aa8e910a8a6798d71816ede3f08267f63

    • SHA256

      b604d93a3ca32c7e59cf72e7355e341fe380452af6acd31d6b3b23ba2dfe57bc

    • SHA512

      acff19b77d7d5df428dbc4ae2f0ab56154770cbf8ebff3d8def8096ead6add607e7876c92c2f17e1629859fe61a302f5527e1c5167512739f89e3eb796b401ee

    • SSDEEP

      24576:AaFvsoJtSc+q4u/7Ihh7LDM/AfCVuoTmYJ1e+:AkvD9M6

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks