Overview

overview

10

Static

static

10

d5c855e2e6...18.exe

windows7-x64

10

d5c855e2e6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d5c855e2e6330e80f9d50ee39397b0e0_JaffaCakes118

  • Size

    1.1MB

  • MD5

    d5c855e2e6330e80f9d50ee39397b0e0

  • SHA1

    5e049796448f03157c9c0356fb2c7e165c9bc2bc

  • SHA256

    6ca2a88674e65ad9eac5550c9892fbc5a0fcc0ec6d858036219907125e09ab27

  • SHA512

    760d69f52b70e166267171badbf08e6c3407fda44660fe3b0075c85d34337cee92c78867a57300f25c4e6bba3cf4aebfb6aad9f113ee4062cb190cd84ded5602

  • SSDEEP

    24576:bss2Sm39NNv9wY7tHwbzfIoK6MUWwvd5hqSReBIzfC8:Qn3poTMmqS

Score
10/10
guest166darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest166

C2

tayfun.no-ip.org:5445

Mutex

DC_MUTEX-A2R4JRB

Attributes
  • InstallPath

    MSDCSC\msdcsc.exe

  • gencode

    iNAt8SbKTPsp

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    MicroUpdate

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d5c855e2e6330e80f9d50ee39397b0e0_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections