General

  • Target

    JaffaCakes118_cc52d7b9f69f6ccb1383fabed3e1850c

  • Size

    1.7MB

  • Sample

    250209-hgwqvszlel

  • MD5

    cc52d7b9f69f6ccb1383fabed3e1850c

  • SHA1

    f153580183fed07955f9dc4c118fbc3d08bce84b

  • SHA256

    47aaa2d0737c2257a91647a2b110cdb0e8f486c2f190533eb3ef99dce9ea2426

  • SHA512

    1438458168a4b76e5a66dbb692eae95b9eadec36bfe132467b85bf6868f37d83899700f2facd82e618d2101ea19be92ac7c0b3c263d51af695d5e9ecc3085483

  • SSDEEP

    49152:zELbVMTrOq4naAYa3d67gX9HaIk5qk/FYg:z6b+fuaAYaN6EXs19Yg

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_cc52d7b9f69f6ccb1383fabed3e1850c

    • Size

      1.7MB

    • MD5

      cc52d7b9f69f6ccb1383fabed3e1850c

    • SHA1

      f153580183fed07955f9dc4c118fbc3d08bce84b

    • SHA256

      47aaa2d0737c2257a91647a2b110cdb0e8f486c2f190533eb3ef99dce9ea2426

    • SHA512

      1438458168a4b76e5a66dbb692eae95b9eadec36bfe132467b85bf6868f37d83899700f2facd82e618d2101ea19be92ac7c0b3c263d51af695d5e9ecc3085483

    • SSDEEP

      49152:zELbVMTrOq4naAYa3d67gX9HaIk5qk/FYg:z6b+fuaAYaN6EXs19Yg

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks