Overview

overview

10

Static

static

10

84c6e26717...18.exe

windows7-x64

10

84c6e26717...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84c6e26717da74ec1daf2d457b59e950_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241102-d3fjjsygjj

  • MD5

    84c6e26717da74ec1daf2d457b59e950

  • SHA1

    daf47cb8bab40c7cb230fae729f2895ee6eba2c9

  • SHA256

    bd63e020f29ca78b0f89d64b0cd4098343b40ed5368111dd4788a5a369471f62

  • SHA512

    a969624c99039697e3c80bf4ab454c81e0a452dbb0de4fb3c7af03d6a79d7469b33d04e8c5f97fa77b446d7dafaa62f26e9313ac66ba233e9515b29be1c302a6

  • SSDEEP

    24576:9AmBpVKHu0Mu9Xo20VGLVP5aniuMPMDp8mtzbMFFS/CzKFS:9AmKZVtfP68UzbiFS/6KFS

Score
10/10
darkcometdiscoveryrattrojanupx

Malware Config

Targets

    • Target

      84c6e26717da74ec1daf2d457b59e950_JaffaCakes118

    • Size

      1.1MB

    • MD5

      84c6e26717da74ec1daf2d457b59e950

    • SHA1

      daf47cb8bab40c7cb230fae729f2895ee6eba2c9

    • SHA256

      bd63e020f29ca78b0f89d64b0cd4098343b40ed5368111dd4788a5a369471f62

    • SHA512

      a969624c99039697e3c80bf4ab454c81e0a452dbb0de4fb3c7af03d6a79d7469b33d04e8c5f97fa77b446d7dafaa62f26e9313ac66ba233e9515b29be1c302a6

    • SSDEEP

      24576:9AmBpVKHu0Mu9Xo20VGLVP5aniuMPMDp8mtzbMFFS/CzKFS:9AmKZVtfP68UzbiFS/6KFS

    Score
    10/10
    darkcometdiscoveryrattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks