Extracted

• • Target

    JaffaCakes118_a3c73fb362c955b230aace3d72edad49

  • Size

    1.0MB

  • MD5

    a3c73fb362c955b230aace3d72edad49

  • SHA1

    416adeadebec3fbd4630e54c8ffe18faf77f7ba6

  • SHA256

    a2a4c8af372eccf278becc37b759b4b0c6b8986a99e110d9ea395bbc4ff8ce28

  • SHA512

    16a6f41f07bcef563b840516a5faf42698b218741c8c8c2dcf56475353f6ed809dcb771e490d5f6f42431013f6ecb008ca1bc73f11c31d4b3019183baae5af7d

  • SSDEEP

    12288:yXsslJiFZPybqOG41dohQAVYpN91jjU3E++3LeoX01p7/qvey27w9JssxsxVcLcj:4s9uhG4qyyOV9S9xmLj6r8nTJLpbpJG

  Score

  10^/10

  darkcometguest16discoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2