Extracted

Extracted

• • Target

    JaffaCakes118_2f342812631c9224a6304baf2c03b52e

  • Size

    666KB

  • MD5

    2f342812631c9224a6304baf2c03b52e

  • SHA1

    2dd2b32f4ba65164449ddf0182933ad8d7607195

  • SHA256

    10947307c0b64b75560e7d0cf3fc70f638216ff88247c50158df64e437eb17a8

  • SHA512

    510c36266978f67209e059ae0f6d21e701af8d06cc4c6b89be358d2d5b99d7024c7f22719a2d062b688e78bd26783aa44e3108540af1570fc413ea3799d3bca1

  • SSDEEP

    12288:VDbJhI6jsJlxaBYVjLjo5rD8yjSfDp4Adnbg5kK:V5y++lbKrDsfDhbg5kK

  Score

  10^/10

  darkcomettestdiscoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2