General

  • Target

    JaffaCakes118_04eefd454ba9b64349e84594a0a87c05

  • Size

    608KB

  • Sample

    250121-q2am5awmgx

  • MD5

    04eefd454ba9b64349e84594a0a87c05

  • SHA1

    68ea164e7437270c1f9bf3397a69277de55ea70e

  • SHA256

    593c221dae784ec58e2fe876bff9c1de8fcce00b2f74c323212a2ba06db80dff

  • SHA512

    f89e6cd7e6f89c5e97ba23705bc4bd0d54a2da4f6c506e103518dbf1efd3db9097ca6dec9c971c3b60b4b82aa34fd0f3fa68b13807938e2620956576966a1dfc

  • SSDEEP

    12288:I+yAivfq/sUmqIF5ivLtcso6ILVd8WyYtmfRTZ:5e3qUUU4tQ6WyVYCTZ

Malware Config

Targets

    • Target

      JaffaCakes118_04eefd454ba9b64349e84594a0a87c05

    • Size

      608KB

    • MD5

      04eefd454ba9b64349e84594a0a87c05

    • SHA1

      68ea164e7437270c1f9bf3397a69277de55ea70e

    • SHA256

      593c221dae784ec58e2fe876bff9c1de8fcce00b2f74c323212a2ba06db80dff

    • SHA512

      f89e6cd7e6f89c5e97ba23705bc4bd0d54a2da4f6c506e103518dbf1efd3db9097ca6dec9c971c3b60b4b82aa34fd0f3fa68b13807938e2620956576966a1dfc

    • SSDEEP

      12288:I+yAivfq/sUmqIF5ivLtcso6ILVd8WyYtmfRTZ:5e3qUUU4tQ6WyVYCTZ

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks