Overview

overview

10

Static

static

10

0dd19949f1...18.exe

windows7-x64

10

0dd19949f1...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0dd19949f1423bfd06c22273a2dd6a86_JaffaCakes118

  • Size

    658KB

  • MD5

    0dd19949f1423bfd06c22273a2dd6a86

  • SHA1

    c8c84e7b1b74cb92b3a9b16e0a279bf7d284f7d1

  • SHA256

    5be8e1235ed28646504b2ae4cc3e1e3118c718d1ceb313045cf4c635d082a4a2

  • SHA512

    b0add9d543d09b3d0e421e8c1b40b14ad2414692678301d271edbd04ecea9a8a1b99b510589cb9cd36c9885cac9c3a6afbc9a651f234a610156d48d7b766d003

  • SSDEEP

    12288:y9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h0:eZ1xuVVjfFoynPaVBUR8f+kN10EBW

Score
10/10
12darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

12

C2

press.no-ip.org:1604

Mutex

DC_MUTEX-ZL2D7RP

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    ucdYxiQwD9UJ

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dd19949f1423bfd06c22273a2dd6a86_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections