Overview

overview

10

Static

static

10

9daf2e407e...18.exe

windows7-x64

10

9daf2e407e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9daf2e407e3ef33746785d43df1dd0d2_JaffaCakes118

  • Size

    658KB

  • MD5

    9daf2e407e3ef33746785d43df1dd0d2

  • SHA1

    35c5a8cd80574c1eb0ec5a7e19067aa90572aee0

  • SHA256

    d4338c2273e6307b96b7fec2612c0ae0839abda3beb365b825bc6c4a311fcbac

  • SHA512

    fc47415d6422fbf103f656aa5e9dd69662c24bd31db71163d218af0515c08efb922ce6ab67588b4c6a53fc7f55477ac80dfc06519d19477567034b5b33eb6ce8

  • SSDEEP

    12288:S9HMeUmcufrvA3kb445UEJ2jsWiD4EvFuu4cNgZhCiZK3/X:+iBIGkbxqEcjsWiDxguehC2+

Score
10/10
mardegradarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

MarDeGra

C2

mardegra.noip.me:1604

Mutex

DC_MUTEX-Q0KDHJZ

Attributes
  • InstallPath

    MicroUpdate\Update.exe

  • gencode

    bx91HirQHpEM

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9daf2e407e3ef33746785d43df1dd0d2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections