Extracted

Extracted

• • Target

    JaffaCakes118_23e2181c231a5b6490ce7e5bc970df72

  • Size

    872KB

  • MD5

    23e2181c231a5b6490ce7e5bc970df72

  • SHA1

    60c37875b1dd1d614ac5881cc287b4973a50ece9

  • SHA256

    87ee38a2e970ab034a561fd0cc432eea4a5bfcdb2e4aabb38a0cf66136686648

  • SHA512

    23d320e6f48f35a9cfa2bcb9f3a8eae185ff9ee99e77da10b4033704a61cde2e296a715af274aa6ee678d6785d2298376bc011f651d7eac1b8b2d064e02a4507

  • SSDEEP

    12288:AF4zwZdWABHIcnrE4t1kkxjl5EGS8ARjjIKUnmHTZK8o0hYhtlzMRpSIhwHt7Zd6:iZdxHIuE4ttxjlyBVTBHE1ZMB4

  Score

  10^/10

  darkcometguest16discoverypersistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Uses the VBS compiler for execution

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2