Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10-04-2024 18:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ebaddfacc64992b2aa63ed49cddda434_JaffaCakes118.exe
Resource
win7-20240221-en
1 signatures
150 seconds
General
-
Target
ebaddfacc64992b2aa63ed49cddda434_JaffaCakes118.exe
-
Size
293KB
-
MD5
ebaddfacc64992b2aa63ed49cddda434
-
SHA1
44833f0868607cc1f0a17d0821e09fefc50d6eda
-
SHA256
8e5b5daa2ca52092f9db748afd35fe52d327306d47efe63cdcbd5404a8581c90
-
SHA512
45b6d1a92bb009c65e9ece9f26950769da8edc1655b9445ae7678a9519e18fddb5acfa5d3b02cf382e0bbdee5de578f61c32c86e7dfb2e4dc3986cd95c400827
-
SSDEEP
6144:mD+dZ5Ih9fzRYuGc2DarCPT9VvOUgNdcWE6FKm6yIjjOfsXyP9v:mqjY9fzR9B2erAVadFKPissd
Malware Config
Extracted
Family
darkcomet
Botnet
Guest16
C2
prokai.no-ip.org:1604
Mutex
DC_MUTEX-ED81KRX
Attributes
-
InstallPath
MSDCSC\svchost.exe
-
gencode
lzKnZLb9A7lX
-
install
true
-
offline_keylogger
true
-
persistence
false
-
reg_key
MicroUpdate