Extracted

• • Target

    JaffaCakes118_135cf09cbdcd1b13c4dd71c43054742b

  • Size

    588KB

  • MD5

    135cf09cbdcd1b13c4dd71c43054742b

  • SHA1

    a47df3b73be63882d36148fc6decb3b6bc135245

  • SHA256

    0c5b1b10052bde89fcea49f62ebc2e66d76ed2b1745508e17317310d3b1fb152

  • SHA512

    952763c009f18e97df3652698a44d4b644a9f08ed3b7118fda1a015abbf80c534243533155b94dc14825774e07ddbfc8a3ea217f4784acf9dc368524dd6dff68

  • SSDEEP

    12288:NjaaEDmHLqRqEEwfX8jPR23nfP9tQTqrK6z1Ms55G1nUeNWECH6fbyUL:8D38jPR6nNemrNzlO/fb/

  Score

  10^/10

  darkcometguest16discoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2