Overview

overview

10

Static

static

10

8c93b05bc4...18.exe

windows7-x64

10

8c93b05bc4...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c93b05bc459efb9de9091ac7c6c7072_JaffaCakes118

  • Size

    694KB

  • MD5

    8c93b05bc459efb9de9091ac7c6c7072

  • SHA1

    caa1ed147c532a61fcfa5696917319ce5ca5090d

  • SHA256

    6c58dff043ecc6ba7477f7c4c12d5f3b162d5bae6cf56fffbc5e796b54952a67

  • SHA512

    7cb7865e5b6efe7f6a62c2a393e3f816b7e6f85faee7df8dd25eeb016fdcf5e3904dec9ee6ebb5bb3d6e455b094c1c39e325174b2f14d70bf4dff7d281b48bc9

  • SSDEEP

    12288:HX2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zb7G/eG0:3ss2Sm39NNv9wY7tHwbzfIoK6Moe

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1604

Mutex

DC_MUTEX-DZPY8UN

Attributes
  • gencode

    31g2VbLiT8xv

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8c93b05bc459efb9de9091ac7c6c7072_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    6f0fecaae0f40ed3ea31df971b69bcca


    Headers

    Imports

    Sections