Extracted

• • Target

    JaffaCakes118_9084424159e638db3a727adc8c382a3a

  • Size

    1.0MB

  • MD5

    9084424159e638db3a727adc8c382a3a

  • SHA1

    dda3efb1bb6317d8e01cf449ef925238ed7661e8

  • SHA256

    49b4b9c30d919d1ecf4f901b55fe8919543b2ac772bd3c392bdbbd925782d350

  • SHA512

    281e9f430d7268a225c6615129185a342033666fbf6a8f6977afd9039c49bae8e9201081897ddd694279c901cac2d79430e95f65a0eb314ce0b7b71676790f4c

  • SSDEEP

    24576:b11zIys+b2LikSnBPohHC6ND8CM/fkDmTeOt8JV:/fsBSnkC6a/cKTeL

  Score

  10^/10

  discoverydarkcometevo9persistencerattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2