General

  • Target

    74bad8b6075db0a7b81d93ba09c88f4f_JaffaCakes118

  • Size

    789KB

  • Sample

    240726-te9eqaxhjr

  • MD5

    74bad8b6075db0a7b81d93ba09c88f4f

  • SHA1

    7aeb556ffa9f8eecacff5089320f9cdf893cefc1

  • SHA256

    63d5c95de4c6bf79b5eb77ceb26b1f42bf63aeebfc6eb8e8c7d65fba67629a89

  • SHA512

    69eb1aeeb6cadda2c93c9b61ce3d2fcb9af06e23bc135b77b1af36109cfed8b4ac4fb6ead52cb772ebac88d2af519e9bad49a89e0469faea451e9d949d242de8

  • SSDEEP

    24576:/nAw2WWeFcfbP9VPSPMTSPL/rWvzq4JJfpaH+6wnD6:fELbVMTrOq48aD6

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

dr-hacker.no-ip.org:81

Mutex

DC_MUTEX-6UHR26Q

Attributes
  • gencode

    yFigxw4cwqYa

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      74bad8b6075db0a7b81d93ba09c88f4f_JaffaCakes118

    • Size

      789KB

    • MD5

      74bad8b6075db0a7b81d93ba09c88f4f

    • SHA1

      7aeb556ffa9f8eecacff5089320f9cdf893cefc1

    • SHA256

      63d5c95de4c6bf79b5eb77ceb26b1f42bf63aeebfc6eb8e8c7d65fba67629a89

    • SHA512

      69eb1aeeb6cadda2c93c9b61ce3d2fcb9af06e23bc135b77b1af36109cfed8b4ac4fb6ead52cb772ebac88d2af519e9bad49a89e0469faea451e9d949d242de8

    • SSDEEP

      24576:/nAw2WWeFcfbP9VPSPMTSPL/rWvzq4JJfpaH+6wnD6:fELbVMTrOq48aD6

    • Darkcomet

      DarkComet is a remote access trojan (RAT) developed by Jean-Pierre Lesueur.

MITRE ATT&CK Enterprise v15

Tasks