General

  • Target

    7786d8a71a38b1fa0caa7906731bd16a_JaffaCakes118

  • Size

    315KB

  • Sample

    241028-ed27paxmdq

  • MD5

    7786d8a71a38b1fa0caa7906731bd16a

  • SHA1

    072ad296454d6c22bf7b59e9d673d49d2730c970

  • SHA256

    b8eeead483b538fe646ee867e00173f187a9958e24e87de2eec84a7936377a68

  • SHA512

    11f0d36debb47bd40b033578df54095dbbfad7fb6d3b441312c7ab5e97e2601cb83af7dbb4b6d6f5b21ebc3cf5aa920c4734a4e2cad0df2079315a248729a2e1

  • SSDEEP

    6144:MDXxN7UZjTATfwqK+ejy2JMnBReB/oOVbu5AkrhajCZcpR9GT7jCcb0sk8PJ:ExNAFTArwqKy2JMDuoOwgTp3G+Yd

Malware Config

Targets

    • Target

      7786d8a71a38b1fa0caa7906731bd16a_JaffaCakes118

    • Size

      315KB

    • MD5

      7786d8a71a38b1fa0caa7906731bd16a

    • SHA1

      072ad296454d6c22bf7b59e9d673d49d2730c970

    • SHA256

      b8eeead483b538fe646ee867e00173f187a9958e24e87de2eec84a7936377a68

    • SHA512

      11f0d36debb47bd40b033578df54095dbbfad7fb6d3b441312c7ab5e97e2601cb83af7dbb4b6d6f5b21ebc3cf5aa920c4734a4e2cad0df2079315a248729a2e1

    • SSDEEP

      6144:MDXxN7UZjTATfwqK+ejy2JMnBReB/oOVbu5AkrhajCZcpR9GT7jCcb0sk8PJ:ExNAFTArwqKy2JMDuoOwgTp3G+Yd

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks