Overview

overview

10

Static

static

10

70db5b604e...18.exe

windows7-x64

10

70db5b604e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    70db5b604e5761bef78d1760bc590ad0_JaffaCakes118

  • Size

    681KB

  • MD5

    70db5b604e5761bef78d1760bc590ad0

  • SHA1

    f498b3d4dce7bbe274765817c43797baf332cfb5

  • SHA256

    9a3903433a6aa612940d3f9109599ecec5b375e095bc3b0c229293a77dd06efd

  • SHA512

    58c6e8e348b20d2383f00d85748256477ab0c6c14a4d39a65e6cd0cd386eabe6a220bf45892efb2fc071f64acf65e629c8607b3051214181e8ad5867b366eb51

  • SSDEEP

    12288:ik0QVlhmPojAPTMEsUTg0oChO/Q2JbsbjPbN5qhRTtYe3f+Iw86k/9/+Cm:v0QRWoJEfg0oChGdJQbjPbNW5tYeP+GU

Score
10/10
çáöííé çáçæáìdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

ÇáÖÍíÉ ÇáÇæáì

C2

127.0.0.1:1604

Mutex

DC_MUTEX-FS1A40B

Attributes
  • gencode

    25PCT6fYJBMD

  • install

    false

  • offline_keylogger

    false

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 70db5b604e5761bef78d1760bc590ad0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d9ad5efdb5472496d0fe8dd4305f55f0


    Headers

    Imports

    Sections