Extracted

• • Target

    JaffaCakes118_82270aed949bda6503b1d0874a97a63b

  • Size

    608KB

  • MD5

    82270aed949bda6503b1d0874a97a63b

  • SHA1

    805e505169f34b2bf629f33fad0c38c6290e6af5

  • SHA256

    f4cdf2802cab61411b1e2ccfd2059a48c98ccac2c9cecbd50431ab5c5f7664ed

  • SHA512

    ecbc8d82ac578de53f30becde9273c83777cf893ea07f85d6710bb909ec9073dfd01c9ca2c9d7c03d10618ff7b2f4c4d10f09a156f8a3e34f20cdb51dec51af2

  • SSDEEP

    12288:2RFj6uJsOFvz1ABs83aaAbhzANOF2+ZkzDolKS2gDFZofGZCC5fFQY:ZujvznbhkNeUolKS2g5/CCl

  Score

  10^/10

  darkcometguest16defense_evasiondiscoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Modifies security service

    defense_evasion

  • Windows security bypass

    defense_evasiontrojan

  • Sets file to hidden

    Modifies file attributes to stop it showing in Explorer etc.

    defense_evasion

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Molebox Virtualization software

    Detects file using Molebox Virtualization software.

  • Windows security modification

    defense_evasiontrojan
  behavioral1behavioral2