General

  • Target

    JaffaCakes118_63212babe588012991b8e3a042c1a6e1

  • Size

    315KB

  • Sample

    250102-gwgd2sxkfw

  • MD5

    63212babe588012991b8e3a042c1a6e1

  • SHA1

    dfbc2c6f22746c19d8b72407b9eabbed602bbd19

  • SHA256

    8cff2c315ced0cf13ea8b2586799f5cdfe560f544d28b093e31d9abd84fa5d08

  • SHA512

    b68c9086d15b5bdf0bdc49da96326ba5b3b9a69b3372d875b119551549a2dea6282f1626058f08d875a2376ceba024ed8871436f48422cb6e852680c58d4f297

  • SSDEEP

    6144:Bh6aTU+puL6nISNZX4Hr+YiI2leKh0PfQbrh69KHhgkp7wGIFAZQJMRRvlBv//OO:BE2HFl4L+ZD8pniIYIFAZqMRR/+jzu

Malware Config

Targets

    • Target

      JaffaCakes118_63212babe588012991b8e3a042c1a6e1

    • Size

      315KB

    • MD5

      63212babe588012991b8e3a042c1a6e1

    • SHA1

      dfbc2c6f22746c19d8b72407b9eabbed602bbd19

    • SHA256

      8cff2c315ced0cf13ea8b2586799f5cdfe560f544d28b093e31d9abd84fa5d08

    • SHA512

      b68c9086d15b5bdf0bdc49da96326ba5b3b9a69b3372d875b119551549a2dea6282f1626058f08d875a2376ceba024ed8871436f48422cb6e852680c58d4f297

    • SSDEEP

      6144:Bh6aTU+puL6nISNZX4Hr+YiI2leKh0PfQbrh69KHhgkp7wGIFAZQJMRRvlBv//OO:BE2HFl4L+ZD8pniIYIFAZqMRR/+jzu

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks