Overview

overview

10

Static

static

10

1e0009c455...18.exe

windows7-x64

10

1e0009c455...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1e0009c45503ab8951da6ad01f038fdc_JaffaCakes118

  • Size

    1.1MB

  • MD5

    1e0009c45503ab8951da6ad01f038fdc

  • SHA1

    d047797d47f3e53bf014632e21455105dd156f52

  • SHA256

    85ba062a27e6676eac9372b21535d56fd41e81589b313fc8dc021ddce8fb1a7c

  • SHA512

    ac84f5721b148fd14f39d4e231a35cb6fbaa961513c46dd0c308fdb24183d8e63ac37f9bd5687e9890366161036ccac32f94ab20689d7859135f1adb5ade24f6

  • SSDEEP

    24576:JnAw2WWeFcfbP9VPSPMTSPL/rWvzq4JddrqvRuLcKfYWlsm6572m:9ELbVMTrOq4lqvCcKf127z

Score
10/10
dawndarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Dawn

C2

host7734.no-ip.biz:1452

Mutex

DC_MUTEX-LBA1P5C

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    F1CkNpxFkJt2

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e0009c45503ab8951da6ad01f038fdc_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections