Overview

overview

10

Static

static

10

ChangerSte...og.dll

windows7-x64

5

ChangerSte...og.dll

windows10-2004-x64

5

ChangerSte...og.dll

windows7-x64

5

ChangerSte...og.dll

windows10-2004-x64

5

Hack.exe

windows7-x64

10

Hack.exe

windows10-2004-x64

10

Читы �...д.url

windows7-x64

1

Читы �...д.url

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82e4b7bf703e63076c38fea973b0a44f_JaffaCakes118

  • Size

    306KB

  • MD5

    82e4b7bf703e63076c38fea973b0a44f

  • SHA1

    149e6fbd1dff89d2aa5a3cf8a8fa806a770218f1

  • SHA256

    142e18ff10fd279499f5c10f94175746e1eec5ef82b7dfbfde2b51a3c9e07a66

  • SHA512

    80f057265dc90700c1e1fbb59e01cf8001f771fac8c714586124033f54f62db64e30fbe9f8cf049648bd2a4ccb870200f0ca126aa167dd75e8641df33a208614

  • SSDEEP

    6144:78WsZzhWxX8Q1xxOrf9XlnFEl7KvhKK2TSqnREAfKX1:78Et1xYDRlnmevhKK2TTnREX1

Score
10/10
upxguest16darkcomet

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

127.0.0.1:1488

109.62.227.63:1488
Mutex

DC_MUTEX-2A9L649

Attributes
  • gencode

    Tqg7EJyTD5Ds

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Signatures

  • Darkcomet family
    darkcomet
  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 82e4b7bf703e63076c38fea973b0a44f_JaffaCakes118
    .rar
  • ChangerSteamByOstrogV2/ChangerSteamByOstrog.asi
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • ChangerSteamByOstrogV2/ChangerSteamByOstrog.dll
    .dll windows:5 windows x86 arch:x86


    Headers

    Sections

  • Hack.exe.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Читы для CS 1.6 ! Программы, Конфиги, Скрипты, Чит-плагины и т.д.URL