Overview

overview

10

Static

static

7

535c9cc29d...18.exe

windows7-x64

10

535c9cc29d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    535c9cc29dcbb82c718d5ef11bddfdda_JaffaCakes118

  • Size

    537KB

  • Sample

    240717-rmpzyaxflg

  • MD5

    535c9cc29dcbb82c718d5ef11bddfdda

  • SHA1

    83356ca895663fbe845bbe018460804cdc40afe0

  • SHA256

    23332a30fb3ce2bf40471f66ef3e14e5025eb781715871c7d8d0f17d3edc2011

  • SHA512

    86afe7cab5183cce5683ee009f43d11d1e422720a3e24443d510e4a5db28947b37eb01ae20669950ece2dec7b83f494cef010e9f96b0e5d7d2437843e4810c23

  • SSDEEP

    12288:3ek1D0uTabJyHVoPuB0rY/ZGs7pJSDLAgMbdjCVayCOG2s8UiD8nXgX0H:OuguT5q0N/sopULpMIUyCIsLQkH

Score
10/10
darkcometguest16_minrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16_min

C2

ghardaui.zapto.org:81

Mutex

DCMIN_MUTEX-QEV6SRM

Attributes
  • gencode

    SgW1NH8UioBN

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      535c9cc29dcbb82c718d5ef11bddfdda_JaffaCakes118

    • Size

      537KB

    • MD5

      535c9cc29dcbb82c718d5ef11bddfdda

    • SHA1

      83356ca895663fbe845bbe018460804cdc40afe0

    • SHA256

      23332a30fb3ce2bf40471f66ef3e14e5025eb781715871c7d8d0f17d3edc2011

    • SHA512

      86afe7cab5183cce5683ee009f43d11d1e422720a3e24443d510e4a5db28947b37eb01ae20669950ece2dec7b83f494cef010e9f96b0e5d7d2437843e4810c23

    • SSDEEP

      12288:3ek1D0uTabJyHVoPuB0rY/ZGs7pJSDLAgMbdjCVayCOG2s8UiD8nXgX0H:OuguT5q0N/sopULpMIUyCIsLQkH

    Score
    10/10
    darkcometguest16_minrattrojan

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

      trojanratdarkcomet
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks