Overview

overview

10

Static

static

10

c162c6d8b7...18.exe

windows7-x64

10

c162c6d8b7...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c162c6d8b7c3c4766930ab14a0584901_JaffaCakes118

  • Size

    660KB

  • MD5

    c162c6d8b7c3c4766930ab14a0584901

  • SHA1

    0405d095cbb3f1acabbb7b298afb61090cea0802

  • SHA256

    4cf09d20146ed8553181eaabd1f60c611755303628be0b6fbd2f3fd9a763c0fc

  • SHA512

    f4442412918c7f87d52bd66721beb36e8b0fc53ca2b6b37c6b258a4e10b336f6946b2867563d8d269ce388798746a5c311a011bdfc865b1d5f0d2a20bbfc024c

  • SSDEEP

    12288:gXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452UH:mnAw2WWeFcfbP9VPSPMTSPL/rWvzq4JX

Score
10/10
victimdarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Victim

C2

fear.sytes.net:

Mutex

DC_MUTEX-KA36F2D

Attributes
  • gencode

    mvjCw9QdG6v7

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c162c6d8b7c3c4766930ab14a0584901_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    0476e7cb10dfdf778f67f55072917b7d


    Headers

    Imports

    Sections