General

  • Target

    JaffaCakes118_0b85660316a984f01c14f1d506baef2c

  • Size

    721KB

  • Sample

    250220-ndeaastqcn

  • MD5

    0b85660316a984f01c14f1d506baef2c

  • SHA1

    96c2ada7dde2a3be12322912eb59e818e5eee237

  • SHA256

    9fb3df1f6e67997424bec5280384bfe71ea1244a5b5cd25d7b8744c4fe8b30f4

  • SHA512

    f86f3da64f772f17fa640a0ce1b7cddf156a32859a226a93788f72cc4990bab97d96bd549cb300ad373625fc5271105d4b1841f318a94bfdf29037b5e1ff1f84

  • SSDEEP

    12288:f4G8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORix:f2UKoN0bUxgGa/pfBHDb+y1HgZ

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_0b85660316a984f01c14f1d506baef2c

    • Size

      721KB

    • MD5

      0b85660316a984f01c14f1d506baef2c

    • SHA1

      96c2ada7dde2a3be12322912eb59e818e5eee237

    • SHA256

      9fb3df1f6e67997424bec5280384bfe71ea1244a5b5cd25d7b8744c4fe8b30f4

    • SHA512

      f86f3da64f772f17fa640a0ce1b7cddf156a32859a226a93788f72cc4990bab97d96bd549cb300ad373625fc5271105d4b1841f318a94bfdf29037b5e1ff1f84

    • SSDEEP

      12288:f4G8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORix:f2UKoN0bUxgGa/pfBHDb+y1HgZ

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    • Darkcomet family

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks