Extracted

• • Target

    JaffaCakes118_c28d23bbece8597dcb052de30f58a2a1

  • Size

    700KB

  • MD5

    c28d23bbece8597dcb052de30f58a2a1

  • SHA1

    95fe965c5c46d9d75a8631fe474501ccad65bd03

  • SHA256

    de482bd15580821be38c7fbf54d9bde1a99479878df4a778f2d560a6d0a04d36

  • SHA512

    44104fdc4b89ba0fed05d1f43ea1ec7a699217fcc6eb29145758aa0f09ede68c602b2de214fcf4784e3a6eaba99e9f47c699131642596899953aecd0e3cb7c39

  • SSDEEP

    12288:B/aUwA5yqYWvm0q6M9MXgTQUwZuVn7Yj+DV/4cudsb+5rGL:HDYgm0qAAQ3ZI8uB4cudJ5iL

  Score

  10^/10

  darkcometfirstdefense_evasiondiscoveryrattrojan

  • Darkcomet

    DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

    trojanratdarkcomet

  • Darkcomet family

    darkcomet

  • Modifies security service

    defense_evasion

  • Windows security bypass

    defense_evasiontrojan

  • Disables RegEdit via registry modification

    defense_evasion

  • Disables Task Manager via registry modification

    defense_evasion

  • Executes dropped EXE

  • Windows security modification

    defense_evasiontrojan

  • Suspicious use of SetThreadContext

  behavioral1behavioral2