Overview

overview

10

Static

static

10

5c98db14ea...18.exe

windows7-x64

10

5c98db14ea...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c98db14eae2051a75db884bc62938c0_JaffaCakes118

  • Size

    658KB

  • MD5

    5c98db14eae2051a75db884bc62938c0

  • SHA1

    771310c416fba4ab0ffa135bebec6c04ea3a2e5e

  • SHA256

    16b8d72b51b7518ab8660f7ebaf9163ce6495c1e383f6a07fe2d36ec21486668

  • SHA512

    ea75ed405bba523babf68685ad02cd932e4bbcb9e2944c21aeb1883bfe67e1717203d60fbf3eccecdd9e26c1900999bfcbdfa127d20306d1bd44e1490008a5d3

  • SSDEEP

    12288:O9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFV:aiBIGkbxqEcjsWiDxguehC2SS

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:25565

92.246.89.145:25565

92.246.89.145:5555

92.246.89.145:8888

127.0.0.1:8888

127.0.0.1:5555
Mutex

DC_MUTEX-UBCQNRK

Attributes
  • gencode

    QP5sRdeDQuBd

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c98db14eae2051a75db884bc62938c0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8033c11f8a2fdfc317e8655120579933


    Headers

    Imports

    Sections