General

  • Target

    JaffaCakes118_63dd15b9a889afe274ee592b3cd2a63d

  • Size

    842KB

  • Sample

    250102-kjvbxswncr

  • MD5

    63dd15b9a889afe274ee592b3cd2a63d

  • SHA1

    71468c76350e7bd0a86800b593691c6d2de64d7f

  • SHA256

    53c19fe76218ef6ed088c8bf252a3df625951d995cd1440e0be4e9b4f123af49

  • SHA512

    02430e77df3855bbc9133dbc0a197343674af15d1a8b76c843d50224d01d8461806118a4f9062e4d5afcc22ebdb681ecb1d9d18f51f68f3e75587388d4bbfe77

  • SSDEEP

    12288:8Gfkwc4ybTNaaaqvE9mJJHgaMSqyaHOD/4h4q8dmKcfYY+Mep96rCnUNqiVEe1YP:bMwVWyBS/vjtcwjpwqUNYWZXAUaR

Malware Config

Targets

    • Target

      JaffaCakes118_63dd15b9a889afe274ee592b3cd2a63d

    • Size

      842KB

    • MD5

      63dd15b9a889afe274ee592b3cd2a63d

    • SHA1

      71468c76350e7bd0a86800b593691c6d2de64d7f

    • SHA256

      53c19fe76218ef6ed088c8bf252a3df625951d995cd1440e0be4e9b4f123af49

    • SHA512

      02430e77df3855bbc9133dbc0a197343674af15d1a8b76c843d50224d01d8461806118a4f9062e4d5afcc22ebdb681ecb1d9d18f51f68f3e75587388d4bbfe77

    • SSDEEP

      12288:8Gfkwc4ybTNaaaqvE9mJJHgaMSqyaHOD/4h4q8dmKcfYY+Mep96rCnUNqiVEe1YP:bMwVWyBS/vjtcwjpwqUNYWZXAUaR

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks