Extracted

• • Target

    JaffaCakes118_f13e447b8cb18af6955efa0954a34c7e

  • Size

    688KB

  • MD5

    f13e447b8cb18af6955efa0954a34c7e

  • SHA1

    c3e17a3773c31dfbdcebbdfdb2cda5e00ab424b8

  • SHA256

    38ecd893e32b6fcfff524f8ab2dc952ef1d7ecf9124babade5321aa29c15ab37

  • SHA512

    22bc64c826f6a9ee3c0bfe3afd1aa04d1a589a6f2b9584ac4b194ba2559cd3bfd0c9200a6330566ba529679de4a6f0d2122985edd4830489fafccf03356aa80c

  • SSDEEP

    12288:63xq6RzaP1mBH1x/mTjTPjBbJLIhRyoYv/ji+bnj3Dz9ceUMK/f+qdXfcviU8:6BqCE1mjxuTjrjTUh8xvLLbhRqeqdXfD

  Score

  10^/10

  darkcometdiscoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Downloads MZ/PE file

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2