Extracted

• • Target

    JaffaCakes118_78ccd12681956b8774ceed847c7d67be

  • Size

    360KB

  • MD5

    78ccd12681956b8774ceed847c7d67be

  • SHA1

    c692331a5d097901828b50bba5c11495992a4305

  • SHA256

    96c2aa7c7624e1a52be37328e6e183c31615bf365ce0af2eb6c371f44f134daf

  • SHA512

    31ed003ed29aa0b5c89ce68b10651e74befc13137528be54f26e164077e62afb4096c6bf397eebaa6e7560db4fa272df0ed35d86e23dd959eb59e2ea5db86a1b

  • SSDEEP

    6144:W/0uojNiqqd8+qIdpdXcXVSO/yxUtKAD9EgLqyLOnPQ7jjElns7:WJmw7JKr8Af9O5xs7

  Score

  10^/10

  darkcometguest16discoverypersistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2