Overview

overview

10

Static

static

10

b1370b6907...18.exe

windows7-x64

10

b1370b6907...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1370b69078107ef24488a3fb2b6bd3b_JaffaCakes118

  • Size

    253KB

  • MD5

    b1370b69078107ef24488a3fb2b6bd3b

  • SHA1

    130053af4941c3957edd1f6cc06e636b2dc74093

  • SHA256

    9f34ffb9db0deb98e578205ce3d652d40c846b2246249549e941778bdb0decca

  • SHA512

    4e8621020d1f79d7f0a6937033aaf66adcea13913e23b788fa2257c32de08ead33ffc29117ed94e9feb44168c5da40e63ad331c2f628a4d678fb55aa0d00d239

  • SSDEEP

    6144:oD7cY2fgssM7Wirg9KXylmRiL+QMeC/i6isqX7UovnONztByipwxZ:ol8E4w5huat7UovONzbXw

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

lmao1.ddns.net:81

Mutex

DC_MUTEX-PQ6KE8F

Attributes
  • gencode

    x37euWtJPYdW

  • install

    false

  • offline_keylogger

    false

  • password

    123456

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • b1370b69078107ef24488a3fb2b6bd3b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections