General

  • Target

    675fb5757f79bdaab93769657d3018ae_JaffaCakes118

  • Size

    689KB

  • Sample

    240522-qgtkhacf42

  • MD5

    675fb5757f79bdaab93769657d3018ae

  • SHA1

    a048c334450fa9f8b3dde6f05aa802d88401d415

  • SHA256

    36b6cd1a1390a427bf88c15c700e5f5705c54d0978b9671f5b3ce3ecf996b854

  • SHA512

    6709ec16f23e628e67d0bfda632d6700f5d5d44f4b9bcc1a07c1364a0c66cb4e5edc831b1e9c29c7c89b29f3c6aead57a568c23f5fe0b7780107519678c902b3

  • SSDEEP

    12288:i9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFWW:OiBIGkbxqEcjsWiDxguehC2S6

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

185.34.183.6:6666

Mutex

DC_MUTEX-ZNDUWHP

Attributes
  • gencode

    oVPEveeud2Hd

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      675fb5757f79bdaab93769657d3018ae_JaffaCakes118

    • Size

      689KB

    • MD5

      675fb5757f79bdaab93769657d3018ae

    • SHA1

      a048c334450fa9f8b3dde6f05aa802d88401d415

    • SHA256

      36b6cd1a1390a427bf88c15c700e5f5705c54d0978b9671f5b3ce3ecf996b854

    • SHA512

      6709ec16f23e628e67d0bfda632d6700f5d5d44f4b9bcc1a07c1364a0c66cb4e5edc831b1e9c29c7c89b29f3c6aead57a568c23f5fe0b7780107519678c902b3

    • SSDEEP

      12288:i9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyFWW:OiBIGkbxqEcjsWiDxguehC2S6

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

MITRE ATT&CK Enterprise v15

Tasks