Overview

overview

10

Static

static

10

8e45f24897...18.exe

windows7-x64

10

8e45f24897...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e45f24897782dfd4e205b82d328e6b5_JaffaCakes118

  • Size

    717KB

  • MD5

    8e45f24897782dfd4e205b82d328e6b5

  • SHA1

    699fc852a712238be2ff1a1adfb5e719c3de4645

  • SHA256

    b4bde29a37502ddccab1a0a330ada64a3c241f115db1daba3fb8958d2b61d73c

  • SHA512

    aa97a4c93f9dfa87f140188016c21dbf909b859a6a2a26bfc666af2a4466bacb55b5668385aab687df8f09791c8576621a650a6301a2ca0e78c9f6b767ea8cca

  • SSDEEP

    12288:1k0QVlhmPojAPTMEsUTg0oChO/Q2JbsbjPbN5qhRTtYe3f+Iw86k/9/+/H:20QRWoJEfg0oChGdJQbjPbNW5tYeP+Ge

Score
10/10
ebpdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

EBP

C2

dcservertet.no-ip.biz:1604

Mutex

DC_MUTEX-AHF4VQL

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    AgWGVtEfaTpP

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e45f24897782dfd4e205b82d328e6b5_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d9ad5efdb5472496d0fe8dd4305f55f0


    Headers

    Imports

    Sections