Overview

overview

10

Static

static

10

c277d0a5a9...18.exe

windows7-x64

10

c277d0a5a9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c277d0a5a965dce18cd1cbb8d2f3a5e3_JaffaCakes118

  • Size

    689KB

  • Sample

    241204-pbj87svmht

  • MD5

    c277d0a5a965dce18cd1cbb8d2f3a5e3

  • SHA1

    82b92c6fe724f1301d29704fed1989b72891ed40

  • SHA256

    f6386883708be6c0ac2fc8361a134e5a6df42349dd79dfcc6f52706636952970

  • SHA512

    fe4089c12fd45fc0230ff50425f13e595aa185d4563639b6ed9724774fcfde4e63e6910fadf304a0e3dbc5adfbe1f8cd5229ffa2e3123287957e9badc683f299

  • SSDEEP

    12288:u9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLd9Ek5C/h7l2:6Z1xuVVjfFoynPaVBUR8f+kN1PEB2

Score
10/10
darkcometguest16discoveryrattrojan

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

virus0707.no-ip.org:81

Mutex

DC_MUTEX-SEKEYCR

Attributes
  • gencode

    8sXT6d4dnuzp

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Targets

    • Target

      c277d0a5a965dce18cd1cbb8d2f3a5e3_JaffaCakes118

    • Size

      689KB

    • MD5

      c277d0a5a965dce18cd1cbb8d2f3a5e3

    • SHA1

      82b92c6fe724f1301d29704fed1989b72891ed40

    • SHA256

      f6386883708be6c0ac2fc8361a134e5a6df42349dd79dfcc6f52706636952970

    • SHA512

      fe4089c12fd45fc0230ff50425f13e595aa185d4563639b6ed9724774fcfde4e63e6910fadf304a0e3dbc5adfbe1f8cd5229ffa2e3123287957e9badc683f299

    • SSDEEP

      12288:u9HFJ9rJxRX1uVVjoaWSoynxdO1FVBaOiRZTERfIhNkNCCLd9Ek5C/h7l2:6Z1xuVVjfFoynPaVBUR8f+kN1PEB2

    Score
    10/10
    darkcometguest16discoveryrattrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks