General

  • Target

    JaffaCakes118_0e428a9849a1d54366c23fffaa3e252a

  • Size

    1.0MB

  • Sample

    250122-q6fd6syqhw

  • MD5

    0e428a9849a1d54366c23fffaa3e252a

  • SHA1

    a2e7b96c58051e8d82cae52ad940f4e4762ed1c2

  • SHA256

    36e40b5a341cad63d730c8943b2a741405f8d5c2ea3d7bfa6de95602e44fa6eb

  • SHA512

    b86bc54412c4a478ae013ad9a5456da1187856b1110c186b5dbbd907bcb3da531bc97aa8df8aee941c837fd96664536dfb50013747a58d4378709385a5ddf33c

  • SSDEEP

    24576:HzoIjIbgyLC495467SQoFOKV3r3djDJpdPietiYIVruy7Kwfw/nY38fSu:78bdLp54goQ0DNdb3cV3Kw8Ym

Malware Config

Targets

    • Target

      JaffaCakes118_0e428a9849a1d54366c23fffaa3e252a

    • Size

      1.0MB

    • MD5

      0e428a9849a1d54366c23fffaa3e252a

    • SHA1

      a2e7b96c58051e8d82cae52ad940f4e4762ed1c2

    • SHA256

      36e40b5a341cad63d730c8943b2a741405f8d5c2ea3d7bfa6de95602e44fa6eb

    • SHA512

      b86bc54412c4a478ae013ad9a5456da1187856b1110c186b5dbbd907bcb3da531bc97aa8df8aee941c837fd96664536dfb50013747a58d4378709385a5ddf33c

    • SSDEEP

      24576:HzoIjIbgyLC495467SQoFOKV3r3djDJpdPietiYIVruy7Kwfw/nY38fSu:78bdLp54goQ0DNdb3cV3Kw8Ym

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks