Extracted

• • Target

    JaffaCakes118_608219cba6663346e66932c65ab3ea10

  • Size

    360KB

  • MD5

    608219cba6663346e66932c65ab3ea10

  • SHA1

    f340a899c50dc4a73b289ed83bf332341e9999db

  • SHA256

    e79a2e9a7c18dd17e15ebbf30cfd9d445b6fd81c55b53b2ad1eea96b64bdfc80

  • SHA512

    16d9052af7a10032c4d4717c319633948ff5d43b552edf8558a8eecd1ccbd2779717e8568351b6d2b01180d8af8df174fc80035b8b5839fa0152c68ecf6da823

  • SSDEEP

    6144:yEQgDCz8aHlgiFMD1AjP4eIBYkDnmC5q+jHbMpHTcHInL80HO:y8gPTjSM+jIpHTcc

  Score

  10^/10

  darkcometnew16discoverypersistencerattrojanupx

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2