Extracted

• • Target

    bb3126f3a5ebd5a056bfbbcc14b9486b_JaffaCakes118

  • Size

    1.1MB

  • MD5

    bb3126f3a5ebd5a056bfbbcc14b9486b

  • SHA1

    0a7ffad2a2e47aa0cd02d3dafff86ebbd81909da

  • SHA256

    e44dfd83a2d004832a7ec438e70fe08c47fe68b8fdca107b463b35d27fc448d1

  • SHA512

    13f53b0f37fd77b50d69b932e7e17aec686a32e114dd3aa970c68f6fddd5602da0d0382268e9dcef20b9a1861b95aaf1bb4abb3a91e28d8d4f60fdd17f77baf2

  • SSDEEP

    12288:DVUhHEuy9odW2cbToyjQQEWeiMfH/FtoF4fzAodcUndzO1IiwgNotE+qL45Nte4u:2RvTYepzTnd0FfydwvaX0M1ry

  Score

  10^/10

  darkcometsheikdiscoverypersistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2