Overview

overview

10

Static

static

10

049806f3c2...18.exe

windows7-x64

10

049806f3c2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    049806f3c2ad463e111e3dcac91bee63_JaffaCakes118

  • Size

    660KB

  • MD5

    049806f3c2ad463e111e3dcac91bee63

  • SHA1

    2ae8636954d8e96398c3e0cae5d286535eb19dd0

  • SHA256

    106ab81f2ef0b9c595f3636a0b66cadad29f65111e78b1222c283e4740daa51b

  • SHA512

    651cca355df05d521b590c9d4ebf6b323ca9fec1719e757a1042c5d75eadb432bf6ee21aadfd377af2e78c211f0f0b0638e5088ad99167907b6464dc46198cd2

  • SSDEEP

    12288:wXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452Um:WnAw2WWeFcfbP9VPSPMTSPL/rWvzq4JW

Score
10/10
waxfdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

WaxF

C2

zezih.no-ip.info:3389

Mutex

DCMIN_MUTEX-8YV2AGG

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    q2MZcLt2CnP7

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    Chrome.exe

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 049806f3c2ad463e111e3dcac91bee63_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    0476e7cb10dfdf778f67f55072917b7d


    Headers

    Imports

    Sections