General
-
Target
678c941e97351d00c4ad788f517a3005_JaffaCakes118
-
Size
521KB
-
Sample
240723-pd7saasbmg
-
MD5
678c941e97351d00c4ad788f517a3005
-
SHA1
e7f445ad79f4aa13c37e8d7ee3a0ab10c805ac03
-
SHA256
ea8e4fda194c9b93c80f62c549b342e06c7079d25a73180f0699775e31c7371b
-
SHA512
97f1cbfb6d92e3b4acb6d6396af4efd4d6dca78ec24dfb5e9eebe73647500477cb6fe37ef115d5e404a64c341602a33073b569710bf2b466781b35d628bd35be
-
SSDEEP
12288:wAun8MBDxCWo9kvrVHeeC3T2+Asgoi7YxX97ni7c:wAun8MBgWukNC3hhiWNnt
Static task
static1
Behavioral task
behavioral1
Sample
678c941e97351d00c4ad788f517a3005_JaffaCakes118.exe
Resource
win7-20240704-en
Malware Config
Extracted
darkcomet
Guest16
ab11.no-ip.biz:1604
DC_MUTEX-ENK4SB4
-
gencode
dqVWNGpFujjS
-
install
false
-
offline_keylogger
true
-
persistence
false
Targets
-
-
Target
678c941e97351d00c4ad788f517a3005_JaffaCakes118
-
Size
521KB
-
MD5
678c941e97351d00c4ad788f517a3005
-
SHA1
e7f445ad79f4aa13c37e8d7ee3a0ab10c805ac03
-
SHA256
ea8e4fda194c9b93c80f62c549b342e06c7079d25a73180f0699775e31c7371b
-
SHA512
97f1cbfb6d92e3b4acb6d6396af4efd4d6dca78ec24dfb5e9eebe73647500477cb6fe37ef115d5e404a64c341602a33073b569710bf2b466781b35d628bd35be
-
SSDEEP
12288:wAun8MBDxCWo9kvrVHeeC3T2+Asgoi7YxX97ni7c:wAun8MBgWukNC3hhiWNnt
-
Suspicious use of SetThreadContext
-