General

  • Target

    JaffaCakes118_6082f0bace0e9fe5a2c1c82f2d572880

  • Size

    382KB

  • Sample

    250101-zbkj3svpbk

  • MD5

    6082f0bace0e9fe5a2c1c82f2d572880

  • SHA1

    b5f369b60b12451a717a843bbd00bceeb9ea7d39

  • SHA256

    897d66b08cac0d05c5ec922825f1bbef1d4b5eb59870d6ba79501cfeb7af94cb

  • SHA512

    649c83aa4bece8695ab82c93f2f1559316242ea97892506529069ee4fc6e1118298d383c9aacbe4a6c0b50618ca4cb3a241c544903889748fb766e6431bdc50b

  • SSDEEP

    6144:vlb6SDOiIN4o2cOMayarS0IjX7n6wXmzbBFXGeCQScV9U:v0Siiu2cOMayaZerXXmhFXGeCj

Malware Config

Targets

    • Target

      JaffaCakes118_6082f0bace0e9fe5a2c1c82f2d572880

    • Size

      382KB

    • MD5

      6082f0bace0e9fe5a2c1c82f2d572880

    • SHA1

      b5f369b60b12451a717a843bbd00bceeb9ea7d39

    • SHA256

      897d66b08cac0d05c5ec922825f1bbef1d4b5eb59870d6ba79501cfeb7af94cb

    • SHA512

      649c83aa4bece8695ab82c93f2f1559316242ea97892506529069ee4fc6e1118298d383c9aacbe4a6c0b50618ca4cb3a241c544903889748fb766e6431bdc50b

    • SSDEEP

      6144:vlb6SDOiIN4o2cOMayarS0IjX7n6wXmzbBFXGeCQScV9U:v0Siiu2cOMayaZerXXmhFXGeCj

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks