Overview

overview

10

Static

static

3

JaffaCakes...5d.exe

windows7-x64

10

JaffaCakes...5d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b1b90b344ee45e9c2feb3595ad50c25d

  • Size

    1.0MB

  • Sample

    250207-ce349swmgk

  • MD5

    b1b90b344ee45e9c2feb3595ad50c25d

  • SHA1

    09a663a5953f8232dd8c1655f146670f43128038

  • SHA256

    39de26a7e53476fc2dd0d4f8df6e1f986b4788c8aafa6b484207eaf99fbdaa9b

  • SHA512

    e4987e9428525390672fd6a5879cad62cc0839d3e89e940d89bc520393b71fb95d4336b504709a1433ae4485d2bcfff7bb72f98750aee5c4bd8c4630cced5304

  • SSDEEP

    24576:6GoIjIbgyLC495467J21roDz26c9n9oHDS:6a8bdLp54lmPp7+

Score
10/10
darkcometdiscoveryrattrojan

Malware Config

Targets

    • Target

      JaffaCakes118_b1b90b344ee45e9c2feb3595ad50c25d

    • Size

      1.0MB

    • MD5

      b1b90b344ee45e9c2feb3595ad50c25d

    • SHA1

      09a663a5953f8232dd8c1655f146670f43128038

    • SHA256

      39de26a7e53476fc2dd0d4f8df6e1f986b4788c8aafa6b484207eaf99fbdaa9b

    • SHA512

      e4987e9428525390672fd6a5879cad62cc0839d3e89e940d89bc520393b71fb95d4336b504709a1433ae4485d2bcfff7bb72f98750aee5c4bd8c4630cced5304

    • SSDEEP

      24576:6GoIjIbgyLC495467J21roDz26c9n9oHDS:6a8bdLp54lmPp7+

    Score
    10/10
    darkcometdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks