Overview

overview

10

Static

static

3

JaffaCakes...39.exe

windows7-x64

10

JaffaCakes...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_19f494a1f55ddb5d654110172a80a839

  • Size

    1.3MB

  • Sample

    250222-qqfp1awrfx

  • MD5

    19f494a1f55ddb5d654110172a80a839

  • SHA1

    fc86950d1b52734f3f2338dce847396da6d88919

  • SHA256

    3a4853fc4fac7a5d0530059998c47d5b0bf4e4b30fca69b910e23d20fa75437d

  • SHA512

    bcb1b29904549f653ee7bc3e34f6c112dda324142d1deb917bf8d7adaff96fb926e57af59a1c4ad456702e856e701f4f355e2293fec107a04bcb42aa4ab18ebb

  • SSDEEP

    12288:9IiabhvyPvPOBXHn5xBwn+MFGvdPdhd52Ce2YVcPmxmelE+oa16feVUD44ThZnLN:pSPh7PCX16NDyJWyKn5f

Score
10/10
darkcomettestdiscoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Attributes
  • gencode

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

rc4.plain

Extracted

Family

darkcomet

Botnet

Test

C2

ratdoshuzo.no-ip.biz:95

Mutex

DC_MUTEX-V1WZW0N

Attributes
  • gencode

    RRg1VblQeHFu

  • install

    false

  • offline_keylogger

    true

  • password

    123a123

  • persistence

    false

rc4.plain

Targets

    • Target

      JaffaCakes118_19f494a1f55ddb5d654110172a80a839

    • Size

      1.3MB

    • MD5

      19f494a1f55ddb5d654110172a80a839

    • SHA1

      fc86950d1b52734f3f2338dce847396da6d88919

    • SHA256

      3a4853fc4fac7a5d0530059998c47d5b0bf4e4b30fca69b910e23d20fa75437d

    • SHA512

      bcb1b29904549f653ee7bc3e34f6c112dda324142d1deb917bf8d7adaff96fb926e57af59a1c4ad456702e856e701f4f355e2293fec107a04bcb42aa4ab18ebb

    • SSDEEP

      12288:9IiabhvyPvPOBXHn5xBwn+MFGvdPdhd52Ce2YVcPmxmelE+oa16feVUD44ThZnLN:pSPh7PCX16NDyJWyKn5f

    Score
    10/10
    darkcomettestdiscoveryrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • Darkcomet family

      darkcomet

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks