Overview

overview

10

Static

static

10

a17007045a...18.exe

windows7-x64

10

a17007045a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a17007045aaf02277359a29d1065411b_JaffaCakes118

  • Size

    660KB

  • MD5

    a17007045aaf02277359a29d1065411b

  • SHA1

    dbdc16cd484d84b574186ed73cc648ddbe47c7f4

  • SHA256

    015591dc61faf8f1af1ba54f7948d7b8c77c5de486826e29111752623708e20a

  • SHA512

    da855cf27fdb05feadc3ab4347fac0c2210d2ee56ff4fd16d424c77d378f40b8a5d04290469ec6ddce6db6b0a18fd57f6e95c40f8a3a9bcc3180fc50b4cd571b

  • SSDEEP

    12288:MXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452UQ:anAw2WWeFcfbP9VPSPMTSPL/rWvzq4JA

Score
10/10
guestdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest

C2

78.37.103.38:1604

Mutex

DC_MUTEX-RBG1WP6

Attributes
  • InstallPath

    u.exe

  • gencode

    R0Hnkmvgehmu

  • install

    true

  • offline_keylogger

    false

  • persistence

    false

  • reg_key

    Google Chrome Update

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a17007045aaf02277359a29d1065411b_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    0476e7cb10dfdf778f67f55072917b7d


    Headers

    Imports

    Sections