General

  • Target

    c7cc1a284a00e91903b9b7d9221b8332_JaffaCakes118

  • Size

    880KB

  • Sample

    241205-p63c9svqet

  • MD5

    c7cc1a284a00e91903b9b7d9221b8332

  • SHA1

    6a82598ca37b4ed477d3e1ddf8c6660b44c66ac4

  • SHA256

    d1c11c089391272c66d150a50c8ec8e37ee548025f0514b38a7bfb3e0f8ade5b

  • SHA512

    48c0108713054b834fc3e81a916ceec10fa5dbaf6340d5aa73cc0df0d054b8430f3238bff4ae8e92be754721087db10211ba8b305a2a84ca94e068115dedb4f4

  • SSDEEP

    12288:x8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1r/g5px:qUKoN0bUxgGa/pfBHDb+y1Lg

Malware Config

Targets

    • Target

      c7cc1a284a00e91903b9b7d9221b8332_JaffaCakes118

    • Size

      880KB

    • MD5

      c7cc1a284a00e91903b9b7d9221b8332

    • SHA1

      6a82598ca37b4ed477d3e1ddf8c6660b44c66ac4

    • SHA256

      d1c11c089391272c66d150a50c8ec8e37ee548025f0514b38a7bfb3e0f8ade5b

    • SHA512

      48c0108713054b834fc3e81a916ceec10fa5dbaf6340d5aa73cc0df0d054b8430f3238bff4ae8e92be754721087db10211ba8b305a2a84ca94e068115dedb4f4

    • SSDEEP

      12288:x8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1r/g5px:qUKoN0bUxgGa/pfBHDb+y1Lg

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks