General

  • Target

    b610368e1d8fdc4f744cc755acf35884_JaffaCakes118

  • Size

    756KB

  • Sample

    241202-blqbbawrej

  • MD5

    b610368e1d8fdc4f744cc755acf35884

  • SHA1

    cdbef88c96479e85114e1643796ce2f068c228be

  • SHA256

    45732532b3682fe43fe41284032da52f26a7492fa8c95c790736f4781d7dca68

  • SHA512

    1e408c1a439d32f85e8e72ba4feecde3e68a13675cb7fac75bbe6203d7276f16f8a23f851ed904166be17e57cb95f58dfbe107c3bf20bd9f1ac7dbcb6941d957

  • SSDEEP

    12288:m9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hz:CZ1xuVVjfFoynPaVBUR8f+kN10EBl

Malware Config

Extracted

Family

darkcomet

Botnet

FBHack

C2

188.36.134.27:20840

Mutex

DCMIN_MUTEX-E051APW

Attributes
  • gencode

    v8X0MKlbnuAP

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      b610368e1d8fdc4f744cc755acf35884_JaffaCakes118

    • Size

      756KB

    • MD5

      b610368e1d8fdc4f744cc755acf35884

    • SHA1

      cdbef88c96479e85114e1643796ce2f068c228be

    • SHA256

      45732532b3682fe43fe41284032da52f26a7492fa8c95c790736f4781d7dca68

    • SHA512

      1e408c1a439d32f85e8e72ba4feecde3e68a13675cb7fac75bbe6203d7276f16f8a23f851ed904166be17e57cb95f58dfbe107c3bf20bd9f1ac7dbcb6941d957

    • SSDEEP

      12288:m9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLo9Ek5C/hz:CZ1xuVVjfFoynPaVBUR8f+kN10EBl

MITRE ATT&CK Enterprise v15

Tasks