Overview

overview

10

Static

static

10

4261edf3ae...18.exe

windows7-x64

10

4261edf3ae...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4261edf3ae6629e4521686cf29138a0d_JaffaCakes118

  • Size

    649KB

  • MD5

    4261edf3ae6629e4521686cf29138a0d

  • SHA1

    842e8efe030041825cfa6f24f9375ca29b6838a2

  • SHA256

    83fa9267323e65fa869ffa90d2fd8c34e6716f8b0ad0c5b9c613933ae7ab3137

  • SHA512

    96ed8975394e20ed73d8e699505f1b14f591fd2a90bac57d2d7e3e7aa20322c2158c5649f320dc2286672562400a82008aed76dd1ac498ba5af316471fdbb9f8

  • SSDEEP

    12288:bk0QVlhmPojAPTMEsUTg0oChO/Q2JbsbjPbN5qhRTtYe3f+Iw86k/9/+u:Q0QRWoJEfg0oChGdJQbjPbNW5tYeP+Gf

Score
10/10
guest16_mindarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16_min

C2

127.0.0.1:1604

Mutex

DCMIN_MUTEX-RDP4WYE

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    cNzp1oalF5l5

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    DarkComet RAT

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4261edf3ae6629e4521686cf29138a0d_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d9ad5efdb5472496d0fe8dd4305f55f0


    Headers

    Imports

    Sections