General

  • Target

    JaffaCakes118_77896ae3f8c279318138693856013130

  • Size

    910KB

  • Sample

    250104-eqqdna1jgw

  • MD5

    77896ae3f8c279318138693856013130

  • SHA1

    77411cae2b0a1e005f0b26f377307e635a04fc11

  • SHA256

    05aa3940608a28808b6dd915992b1ccef500851d8ffa14639780dc861c6aff54

  • SHA512

    430ed9307a9019fcadec5706f4f17c0d4d396b8a4273c9f31913301bdaa9157b9c86f47113b213ce69b801341685dca3ec3610503d43a16fbe0445a2e475a4da

  • SSDEEP

    12288:ClfpHH+/eGLXjnRvj8PdFLrUfn8dMdx9GA9hGs3Toj5GSyaLhMu0svTVdKdUY87q:qxHHKnnR7gnG9GvMToDy8RdeUY87Zn

Malware Config

Targets

    • Target

      JaffaCakes118_77896ae3f8c279318138693856013130

    • Size

      910KB

    • MD5

      77896ae3f8c279318138693856013130

    • SHA1

      77411cae2b0a1e005f0b26f377307e635a04fc11

    • SHA256

      05aa3940608a28808b6dd915992b1ccef500851d8ffa14639780dc861c6aff54

    • SHA512

      430ed9307a9019fcadec5706f4f17c0d4d396b8a4273c9f31913301bdaa9157b9c86f47113b213ce69b801341685dca3ec3610503d43a16fbe0445a2e475a4da

    • SSDEEP

      12288:ClfpHH+/eGLXjnRvj8PdFLrUfn8dMdx9GA9hGs3Toj5GSyaLhMu0svTVdKdUY87q:qxHHKnnR7gnG9GvMToDy8RdeUY87Zn

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks