Analysis
-
max time kernel
140s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
31-10-2024 07:58
General
-
Target
82626fe351dae6842ffb2474e5ff43c4_JaffaCakes118.exe
-
Size
714KB
-
MD5
82626fe351dae6842ffb2474e5ff43c4
-
SHA1
62c0ac777f465e5f8ab0c72ea196612dc321b4b0
-
SHA256
de29f04ab3c20fe7149343799bd55cce22c2505c59793db0bfe6e77073f40df5
-
SHA512
58e9f1215b8380fb4d2e7af1c2ae5fc93e5689fea837c887ae2c8ca84508021bcaa24118aa13f6e3ff7ecd1a562512339b9e43282135c77fb6e96aaa83cf8cc5
-
SSDEEP
12288:KaAchpWsuVTv7ItY8XljyypHP7cOLBev03hlULsmWZ++09ZcKDVs4v9db:LAEENIq8XwyVPQclDq/+Wnps4Xb
Score
10/10
Malware Config
Signatures
-
Darkcomet
DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.
-
Darkcomet family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\82626fe351dae6842ffb2474e5ff43c4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\82626fe351dae6842ffb2474e5ff43c4_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
768KB
-
Filesize
4KB