General

  • Target

    JaffaCakes118_0ade45a1bf439cd06cf429eec5d01c5f

  • Size

    1.0MB

  • Sample

    250112-k4r3aswkev

  • MD5

    0ade45a1bf439cd06cf429eec5d01c5f

  • SHA1

    7a5ad9e9ec96facce895280bf18abda16021c031

  • SHA256

    2364b64df5a043456b796db205f8b8627f9482ba15d3f2dc1b33cebca1c70035

  • SHA512

    58194d750a57dd458c74de58c52460406e682666c7d639328d907d80b2b3e857109f4a1fb4bdce30cf62353a7f75f669c5781a2f89ebf21c2dc646930bf8ab2d

  • SSDEEP

    24576:VXI0son0ye4cC1dEyv/+LtfX9kT9vUJU1booiV5Z372W9wSvCqTtq:V9eQ1dEyv/+LtfX9kT9vU21boFHFN

Malware Config

Targets

    • Target

      JaffaCakes118_0ade45a1bf439cd06cf429eec5d01c5f

    • Size

      1.0MB

    • MD5

      0ade45a1bf439cd06cf429eec5d01c5f

    • SHA1

      7a5ad9e9ec96facce895280bf18abda16021c031

    • SHA256

      2364b64df5a043456b796db205f8b8627f9482ba15d3f2dc1b33cebca1c70035

    • SHA512

      58194d750a57dd458c74de58c52460406e682666c7d639328d907d80b2b3e857109f4a1fb4bdce30cf62353a7f75f669c5781a2f89ebf21c2dc646930bf8ab2d

    • SSDEEP

      24576:VXI0son0ye4cC1dEyv/+LtfX9kT9vUJU1booiV5Z372W9wSvCqTtq:V9eQ1dEyv/+LtfX9kT9vU21boFHFN

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks