General

  • Target

    JaffaCakes118_10fc510f90d4e37617e7928381d3678e

  • Size

    646KB

  • Sample

    250122-zle3cavmat

  • MD5

    10fc510f90d4e37617e7928381d3678e

  • SHA1

    c3cba2f28c4d884bdc5e57b59187430aceb4b3b8

  • SHA256

    06e9926cd69033874b37d4855b604411acee28ed5497c8f03a439e8f820f2adf

  • SHA512

    ca7996e46eb17c0ed8c12e15c257c379d02c271e5db3eab057fd0521a38c581ee965c17dc1d268bf2d9f53af30095b8cda649a99025ce2aa5978c5bb8e8c991f

  • SSDEEP

    12288:o8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORixX:BUKoN0bUxgGa/pfBHDb+y1HgZp

Malware Config

Targets

    • Target

      JaffaCakes118_10fc510f90d4e37617e7928381d3678e

    • Size

      646KB

    • MD5

      10fc510f90d4e37617e7928381d3678e

    • SHA1

      c3cba2f28c4d884bdc5e57b59187430aceb4b3b8

    • SHA256

      06e9926cd69033874b37d4855b604411acee28ed5497c8f03a439e8f820f2adf

    • SHA512

      ca7996e46eb17c0ed8c12e15c257c379d02c271e5db3eab057fd0521a38c581ee965c17dc1d268bf2d9f53af30095b8cda649a99025ce2aa5978c5bb8e8c991f

    • SSDEEP

      12288:o8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORixX:BUKoN0bUxgGa/pfBHDb+y1HgZp

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks