Overview

overview

10

Static

static

10

136f611e4b...18.exe

windows7-x64

10

136f611e4b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    136f611e4bd103e72f651dc983ecba6c_JaffaCakes118

  • Size

    658KB

  • MD5

    136f611e4bd103e72f651dc983ecba6c

  • SHA1

    f17ccd751e0791a359899a47b0845937c4d4b2d0

  • SHA256

    be0b67bf85d42efaac3fb47b3d5b14c356d9b867d01d09719518a2a713909f07

  • SHA512

    393d5e376fcc64bbf50ff1e4e8d66d16f6f0a49922cadca6b7f7a6d5b92d6a8f015879eff6c2f4bc5790215fec2e02d4526fcde822fbfed9e198382a306b733d

  • SSDEEP

    12288:S9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/h2:+Z1xuVVjfFoynPaVBUR8f+kN10EBc

Score
10/10
noodarkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

noo

C2

nuff.no-ipbiz:1604

Mutex

DCMIN_MUTEX-8JEVSDZ

Attributes
  • InstallPath

    DCSCMIN\IMDCSC.exe

  • gencode

    jXUXhuycAs9D

  • install

    true

  • offline_keylogger

    true

  • persistence

    false

  • reg_key

    DarkComet RAT

Signatures

  • Darkcomet family
    darkcomet
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 136f611e4bd103e72f651dc983ecba6c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    e5b4359a3773764a372173074ae9b6bd


    Headers

    Imports

    Sections