Overview

overview

10

Static

static

10

7c523831a6...18.exe

windows7-x64

10

7c523831a6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c523831a6209846aaf32fda3c9d7e74_JaffaCakes118

  • Size

    757KB

  • Sample

    241029-wezxdswnfy

  • MD5

    7c523831a6209846aaf32fda3c9d7e74

  • SHA1

    11007cb00e850d8c2e30f9c19f0f1704f47e8d4b

  • SHA256

    dad91fedb66af8841c20a1a329558e46782720a6c7094aea0ccfad378ea1398c

  • SHA512

    33089c223b0f5bd5d9c698858d6723fa98488bfa15175ec59464643c490c8ce6f3d5460f9978060a146ff3c75e190d79c3e442f4d6e153605c7ada535235849b

  • SSDEEP

    12288:qXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452UR:0nAw2WWeFcfbP9VPSPMTSPL/rWvzq4Jh

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:81

Mutex

DC_MUTEX-F54S21D

Attributes
  • gencode

    cSCkpdpyFdle

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      7c523831a6209846aaf32fda3c9d7e74_JaffaCakes118

    • Size

      757KB

    • MD5

      7c523831a6209846aaf32fda3c9d7e74

    • SHA1

      11007cb00e850d8c2e30f9c19f0f1704f47e8d4b

    • SHA256

      dad91fedb66af8841c20a1a329558e46782720a6c7094aea0ccfad378ea1398c

    • SHA512

      33089c223b0f5bd5d9c698858d6723fa98488bfa15175ec59464643c490c8ce6f3d5460f9978060a146ff3c75e190d79c3e442f4d6e153605c7ada535235849b

    • SSDEEP

      12288:qXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452UR:0nAw2WWeFcfbP9VPSPMTSPL/rWvzq4Jh

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks