General

  • Target

    JaffaCakes118_622571e634b24fb5e9b0605b5b5b8aa1

  • Size

    457KB

  • Sample

    250102-c38dws1ncr

  • MD5

    622571e634b24fb5e9b0605b5b5b8aa1

  • SHA1

    2b783895e0bba1c4d05093539bb03ded3372147a

  • SHA256

    79ffdc715dfad143aa233fb24d5e29078c4e30d9bf09c7e7fc71f1bbd7d5c750

  • SHA512

    e8cdc6e25f61d12c3977e79d153e37ff81633da291e3191d828546c82baf6435cd05ea3465174892091eb4c707e99ca65b5ecdeb3f8e7be16343430625f57e18

  • SSDEEP

    12288:m/sijzUrkDVVUKQI+kd8KpTnsn0FNozC8ziU:m/si3UraVUKkJKdnsnJTD

Malware Config

Targets

    • Target

      JaffaCakes118_622571e634b24fb5e9b0605b5b5b8aa1

    • Size

      457KB

    • MD5

      622571e634b24fb5e9b0605b5b5b8aa1

    • SHA1

      2b783895e0bba1c4d05093539bb03ded3372147a

    • SHA256

      79ffdc715dfad143aa233fb24d5e29078c4e30d9bf09c7e7fc71f1bbd7d5c750

    • SHA512

      e8cdc6e25f61d12c3977e79d153e37ff81633da291e3191d828546c82baf6435cd05ea3465174892091eb4c707e99ca65b5ecdeb3f8e7be16343430625f57e18

    • SSDEEP

      12288:m/sijzUrkDVVUKQI+kd8KpTnsn0FNozC8ziU:m/si3UraVUKkJKdnsnJTD

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks