Overview

overview

10

Static

static

10

9b8c010b38...18.exe

windows7-x64

10

9b8c010b38...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9b8c010b3813d335efcff7d8ac3f25d4_JaffaCakes118

  • Size

    690KB

  • MD5

    9b8c010b3813d335efcff7d8ac3f25d4

  • SHA1

    b9cbe995733c0b65ba3cbadb99210172f9802d0d

  • SHA256

    81176c1ed4fbe80bb94af0a1bb81828d304ecfcf9c421a3e968b838e915f92fa

  • SHA512

    63623504cf0ef97d046cb388c43f90ac14de1a96c60a5453a1381a6d6948359e1bd0289c5f136877ab8b30b1d26e1d26bde2dae70a5cfc868a92d7a4b96c214d

  • SSDEEP

    12288:u9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZKD/XdyF2X:6iBIGkbxqEcjsWiDxguehC2Sr

Score
10/10
alldarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

all

C2

127.0.0.1:1604

Mutex

DC_MUTEX-MA1ASU0

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    DZey1WR0MTTc

  • install

    true

  • offline_keylogger

    true

  • password

    0123456789

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b8c010b3813d335efcff7d8ac3f25d4_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8033c11f8a2fdfc317e8655120579933


    Headers

    Imports

    Sections