Overview

overview

10

Static

static

10

177e654ceb...18.exe

windows7-x64

10

177e654ceb...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    177e654cebbe35b66515f6c81cb264ac_JaffaCakes118

  • Size

    247KB

  • Sample

    240627-zrc5yasglr

  • MD5

    177e654cebbe35b66515f6c81cb264ac

  • SHA1

    95ef9fbc3c40b1bea736c2d328ca0333c34da7a8

  • SHA256

    165ec960c93176a6dea098a07d6d32db905ebfc6d5c7c128f75292bf884f5ac0

  • SHA512

    685d7369f96eb619a53b03508abe3d57504fecd15a1a7c694d6625521889dc8f20dc0c48b081a612a90423eeeec553bfdee55054cfa0a1d1f72060229c3ea3c0

  • SSDEEP

    6144:fFRaI2EqBP/WsZL1PgLl4w0AidVym0EnarUBYVs:9R72EqluswR45JTnaEY2

Score
10/10
darkcometrattrojanupx

Malware Config

Targets

    • Target

      177e654cebbe35b66515f6c81cb264ac_JaffaCakes118

    • Size

      247KB

    • MD5

      177e654cebbe35b66515f6c81cb264ac

    • SHA1

      95ef9fbc3c40b1bea736c2d328ca0333c34da7a8

    • SHA256

      165ec960c93176a6dea098a07d6d32db905ebfc6d5c7c128f75292bf884f5ac0

    • SHA512

      685d7369f96eb619a53b03508abe3d57504fecd15a1a7c694d6625521889dc8f20dc0c48b081a612a90423eeeec553bfdee55054cfa0a1d1f72060229c3ea3c0

    • SSDEEP

      6144:fFRaI2EqBP/WsZL1PgLl4w0AidVym0EnarUBYVs:9R72EqluswR45JTnaEY2

    Score
    10/10
    darkcometrattrojanupx

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks