General

  • Target

    JaffaCakes118_203ded66b9f0978a6a32685d39c09931

  • Size

    368KB

  • Sample

    250113-eh2rqavkdw

  • MD5

    203ded66b9f0978a6a32685d39c09931

  • SHA1

    443ee89de2ae59917fa364a43ace52a350978a74

  • SHA256

    23990ac288e49d54fa721af4f199e39f399d898ac909bbf8d18110b18416a874

  • SHA512

    e211f59a6a374cd6e7e94dd07cb99e6490506589183db85662d2920a65137459bb13490fb33f2254a77b992736119ce3b6464dee9c5c9beaa6b8ec254011431f

  • SSDEEP

    6144:/Juj6ONb689G5d4KwUCCNMgQVvuuX7uLi39xScYsXThoU6Tvl24vd:RFmLUuPUaquLue39JYsXT2d

Malware Config

Targets

    • Target

      JaffaCakes118_203ded66b9f0978a6a32685d39c09931

    • Size

      368KB

    • MD5

      203ded66b9f0978a6a32685d39c09931

    • SHA1

      443ee89de2ae59917fa364a43ace52a350978a74

    • SHA256

      23990ac288e49d54fa721af4f199e39f399d898ac909bbf8d18110b18416a874

    • SHA512

      e211f59a6a374cd6e7e94dd07cb99e6490506589183db85662d2920a65137459bb13490fb33f2254a77b992736119ce3b6464dee9c5c9beaa6b8ec254011431f

    • SSDEEP

      6144:/Juj6ONb689G5d4KwUCCNMgQVvuuX7uLi39xScYsXThoU6Tvl24vd:RFmLUuPUaquLue39JYsXT2d

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks