Overview

overview

10

Static

static

10

JaffaCakes...f0.exe

windows7-x64

10

JaffaCakes...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_43f1896eb5777939a7f3a59b2990e3f0

  • Size

    646KB

  • Sample

    250101-cymavstmbp

  • MD5

    43f1896eb5777939a7f3a59b2990e3f0

  • SHA1

    33d55149864f045ab98d82169d72fa6078374a54

  • SHA256

    fda2ed686a6620e08b3de22c21ed622b47a0ff50f163dcbe67eeb66409ab13da

  • SHA512

    eed4ade6f118dde9c3f20c911360e0257922339c20c28fd91fe0e19d09210d164625d2f3478a8d22dcbb485114d619eecbef6cda2912913c08a22b4147816416

  • SSDEEP

    12288:Q8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORix8:JUKoN0bUxgGa/pfBHDb+y1HgZO

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      JaffaCakes118_43f1896eb5777939a7f3a59b2990e3f0

    • Size

      646KB

    • MD5

      43f1896eb5777939a7f3a59b2990e3f0

    • SHA1

      33d55149864f045ab98d82169d72fa6078374a54

    • SHA256

      fda2ed686a6620e08b3de22c21ed622b47a0ff50f163dcbe67eeb66409ab13da

    • SHA512

      eed4ade6f118dde9c3f20c911360e0257922339c20c28fd91fe0e19d09210d164625d2f3478a8d22dcbb485114d619eecbef6cda2912913c08a22b4147816416

    • SSDEEP

      12288:Q8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORix8:JUKoN0bUxgGa/pfBHDb+y1HgZO

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks