Overview

overview

10

Static

static

10

e0af4c6d2f...18.exe

windows7-x64

10

e0af4c6d2f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0af4c6d2f8562c379aea6a8eee8962a_JaffaCakes118

  • Size

    747KB

  • MD5

    e0af4c6d2f8562c379aea6a8eee8962a

  • SHA1

    a8436d01a20632323afadf46e0c81072d7e27838

  • SHA256

    98fb675a212961b8961a13b90fe88ba7d22e803c5f01000e9d9b6d0376489548

  • SHA512

    769fe996e0b2b751054f475db96ff2ee828f3151c09a96928d40c30df4ee34c19a23ee39d12cb1877afc034c90bbb1cdf25946c08c38cb81930827cd002068a6

  • SSDEEP

    12288:hk0QVlhmPojAPTMEsUTg0oChO/Q2JbsbjPbN5qhRTtYe3f+Iw86k/9/+Rb:q0QRWoJEfg0oChGdJQbjPbNW5tYeP+GI

Score
10/10
guest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

77.57.222.10:1604

192.168.1.138:1604
Mutex

DC_MUTEX-C5N4RZ0

Attributes
  • InstallPath

    PS3 Jailbreak.exe

  • gencode

    dGTYGSS1Gd2G

  • install

    true

  • offline_keylogger

    true

  • persistence

    true

  • reg_key

    PS3 Jailbreak

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e0af4c6d2f8562c379aea6a8eee8962a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    d9ad5efdb5472496d0fe8dd4305f55f0


    Headers

    Imports

    Sections