Overview

overview

10

Static

static

10

594135f661...18.exe

windows7-x64

10

594135f661...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    594135f66163084e5bb9af4ef47970b1_JaffaCakes118

  • Size

    251KB

  • MD5

    594135f66163084e5bb9af4ef47970b1

  • SHA1

    bae9e81bbfe3e7ce8242c46abe1c1622b6bcf5b3

  • SHA256

    c5a21f9c8309d4a3e31ed1f6e299800ab6eca7ec038e3a95d0b81e65b3bec69f

  • SHA512

    6de5c97ff247de357e084c6c8a59175de89e2af2e98e5e2fbb7fd2964dfe4056d95f2ac8ccae2b32b4c310240d1412327f94507c504c986d468e2e0427bf853c

  • SSDEEP

    6144:KcNYk1yuwEDBum3qYWnl0pd0EX3Zq2b6wfIDYm0PHQ:KcWkbgTYWnYnt/IDYhP

Score
10/10
upxtestdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Test

C2

127.0.0.1:1604

Mutex

DC_MUTEX-2AAK3JC

Attributes
  • gencode

    uL8qSKiTKGeC

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 594135f66163084e5bb9af4ef47970b1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections