General

  • Target

    8a1f50da1935eaf511e12c56b428926e_JaffaCakes118

  • Size

    660KB

  • MD5

    8a1f50da1935eaf511e12c56b428926e

  • SHA1

    27b94eab09a4417c17936a4f6c205dc6ce7e9cae

  • SHA256

    152dd4a4d03042ed518889ebd3216768f640c75df58fe7227bfa15957a49e340

  • SHA512

    16f1d4d28410c47fed331dabadedccf4c900063a45ef2aff83e954e94577d9ef7395724f097f2a6403993b3ab7a67225530f99da164d04f2ef292bd2423c2088

  • SSDEEP

    12288:wXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452U1:WnAw2WWeFcfbP9VPSPMTSPL/rWvzq4Jl

Score
10/10

Malware Config

Extracted

Family

darkcomet

Botnet

WaxF

C2

zezih.no-ip.info:3389

Mutex

DCMIN_MUTEX-Q9X6EFQ

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    iRScTdQAXe6w

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    Chrome.exe

Signatures

  • Darkcomet family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8a1f50da1935eaf511e12c56b428926e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    0476e7cb10dfdf778f67f55072917b7d


    Headers

    Imports

    Sections