Extracted

• • Target

    JaffaCakes118_b1e82d7a7d0181205e6b17f7aa1e2f3e

  • Size

    662KB

  • MD5

    b1e82d7a7d0181205e6b17f7aa1e2f3e

  • SHA1

    73c0df86edac3a096c8a81a3439223f008111b4b

  • SHA256

    435958a141c1cbc27618a843db8b7bbf169cd9f97e935943e4a0f2afac4de1a4

  • SHA512

    0211728fc08b660812daae991d0aea8aa724ae70be7c8304af1a3b2a48e6f154f841b37ec1187c726dc2bd9bc02fd3d157eecf9d23033d8bcfb45da2dd8b7c7a

  • SSDEEP

    12288:e9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hx:qZ1xuVVjfFoynPaVBUR8f+kN10EBj

  Score

  10^/10

  darkcometguest16defense_evasiondiscoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Sets file to hidden

    Modifies file attributes to stop it showing in Explorer etc.

    defense_evasion

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1