Extracted

• • Target

    774c04e8f0f12b89694173096f931fb7_JaffaCakes118

  • Size

    700KB

  • MD5

    774c04e8f0f12b89694173096f931fb7

  • SHA1

    0b9fe97c7457b49acc840f9d09202b0339aeb547

  • SHA256

    d9cea51ae23673bdce6bd0f432448aea6f9101f4c3e802236986f6cd77a2f355

  • SHA512

    3a932eb3762f81461d03b8170ebf7f66dee4c1a3400e6d9cb1b92154fe2d87fbb1edfd47136d627211a1cc280f31ebbc2254b68e3a6c5c97f20f2c31f959d1ee

  • SSDEEP

    12288:j/xNa+JQbp3d45lI0ekZe91BHVVPfY17wnRofK7LP5/8a5YkW97rGMOHH4kSt:bubpNUlnv0zRVliPKJkLkmBOHH4kSt

  Score

  10^/10

  darkcometcarder-botdiscoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2