General
-
Target
3b737bf81a4c121fa405bac8589a5f96_JaffaCakes118
-
Size
847KB
-
Sample
240512-wyafvach48
-
MD5
3b737bf81a4c121fa405bac8589a5f96
-
SHA1
4f22d7f9de5cf22007f9988bf7d0ca0df466f9d8
-
SHA256
8541b0cb905f97cadbb276010ecfd397a3c8f02754cb6af3ba3719acb0baff2c
-
SHA512
36ff3faa7331e61db742919db7efe700e721e658e2b6100a9dadcd3598120d0261acb7c2628069ebfd146f340beb00ec3dac9d3fc7292d4b3a9252853cf93e0b
-
SSDEEP
12288:M9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFi2oLxbxLi:giBIGkbxqEcjsWiDxguehC2Sz2f
Behavioral task
behavioral1
Sample
3b737bf81a4c121fa405bac8589a5f96_JaffaCakes118.exe
Resource
win7-20240221-en
Malware Config
Extracted
darkcomet
Guest16
127.0.0.1:1604
DC_MUTEX-55R3JZS
-
gencode
VnHBQ4djNPra
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
3b737bf81a4c121fa405bac8589a5f96_JaffaCakes118
-
Size
847KB
-
MD5
3b737bf81a4c121fa405bac8589a5f96
-
SHA1
4f22d7f9de5cf22007f9988bf7d0ca0df466f9d8
-
SHA256
8541b0cb905f97cadbb276010ecfd397a3c8f02754cb6af3ba3719acb0baff2c
-
SHA512
36ff3faa7331e61db742919db7efe700e721e658e2b6100a9dadcd3598120d0261acb7c2628069ebfd146f340beb00ec3dac9d3fc7292d4b3a9252853cf93e0b
-
SSDEEP
12288:M9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFi2oLxbxLi:giBIGkbxqEcjsWiDxguehC2Sz2f
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-