Overview

overview

10

Static

static

10

abf5a0683f...18.exe

windows7-x64

10

abf5a0683f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abf5a0683fbe21fc86548e830d9b832a_JaffaCakes118

  • Size

    658KB

  • Sample

    241128-l75cgatqfs

  • MD5

    abf5a0683fbe21fc86548e830d9b832a

  • SHA1

    6c72bbca7910f284eab94fadf518350c47d055fb

  • SHA256

    4528cdc1f723c90050dea68b4121d9df68776166ba37eca47857b7daccf6f507

  • SHA512

    ffb6b575cf80d104fd29ee9d2e68bebfb2795ddf5bc5f4a250dac5e9ab062e49619b4db3a5a496226eaa759dcab7eeec37ceb9dccd3fc8ecd4af9c8f2d989991

  • SSDEEP

    12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hw:GZ1xuVVjfFoynPaVBUR8f+kN10EBK

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

pootdns.zapto.org:5678

Mutex

DC_MUTEX-GM4HK2B

Attributes
  • gencode

    mH4xyEUm0BH2

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      abf5a0683fbe21fc86548e830d9b832a_JaffaCakes118

    • Size

      658KB

    • MD5

      abf5a0683fbe21fc86548e830d9b832a

    • SHA1

      6c72bbca7910f284eab94fadf518350c47d055fb

    • SHA256

      4528cdc1f723c90050dea68b4121d9df68776166ba37eca47857b7daccf6f507

    • SHA512

      ffb6b575cf80d104fd29ee9d2e68bebfb2795ddf5bc5f4a250dac5e9ab062e49619b4db3a5a496226eaa759dcab7eeec37ceb9dccd3fc8ecd4af9c8f2d989991

    • SSDEEP

      12288:K9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hw:GZ1xuVVjfFoynPaVBUR8f+kN10EBK

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks