Overview

overview

10

Static

static

10

a1c7cb0eb6...18.exe

windows7-x64

10

a1c7cb0eb6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a1c7cb0eb60db4eed4bac5a1f8721d2f_JaffaCakes118

  • Size

    649KB

  • MD5

    a1c7cb0eb60db4eed4bac5a1f8721d2f

  • SHA1

    ae077d8af0185ec8065fbb41f8d5e78aa547dae8

  • SHA256

    9ce1ef730ea38117c5b0b0d0f193fdaf3f2fab50bfd61f7ae7a4da7d315d692c

  • SHA512

    0639c2ea80af20cb049030543a98178e006d3eb879e0f80f3a836b6863ea7681459751302c26e0375c6fa31efe7af1630b31896a10a2f6cb624d21858b85699a

  • SSDEEP

    12288:y00FElJW7E28o7fxjHUyw07GJGbgCxb0nX/bd9q4lSpqE+0cV3X7/ul:P0FeCE25jfw07GJCxxInX/bdBSpqtD3i

Score
10/10
guest16_mindarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16_min

C2

127.0.0.1:1604

Mutex

DCMIN_MUTEX-CLKZ2Y4

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    XByKL0feKtnx

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    DarkComet RAT

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a1c7cb0eb60db4eed4bac5a1f8721d2f_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    8cc1146aab22e4541da720368d5f5dbc


    Headers

    Imports

    Sections