General
-
Target
c5ff5d896fef12ac209060533536abaf_JaffaCakes118
-
Size
660KB
-
Sample
241205-fht8bazkhx
-
MD5
c5ff5d896fef12ac209060533536abaf
-
SHA1
9f5faa3f4b989e596c676d6bbb509654e22a1fbf
-
SHA256
a6f8b6661b107082e54d3a418e2df55d7543243e178b99a16a7c35402af58b99
-
SHA512
7ed5782904acace0fc53ecdcb0238b72368f8b3d1c37a581a3542466913b3b41f3fe1c9447b38f6d875b211ef6be2ad7ab127260971a384de199ceb8538c3572
-
SSDEEP
12288:QXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452Uw:2nAw2WWeFcfbP9VPSPMTSPL/rWvzq4JA
Behavioral task
behavioral1
Sample
c5ff5d896fef12ac209060533536abaf_JaffaCakes118.exe
Resource
win7-20240903-en
Malware Config
Extracted
darkcomet
Guest16
nekistamos1.zapto.org:82
DC_MUTEX-ZQP2D01
-
gencode
y2QC5zXcptF6
-
install
false
-
offline_keylogger
true
-
persistence
false
Extracted
latentbot
nekistamos1.zapto.org
Targets
-
-
Target
c5ff5d896fef12ac209060533536abaf_JaffaCakes118
-
Size
660KB
-
MD5
c5ff5d896fef12ac209060533536abaf
-
SHA1
9f5faa3f4b989e596c676d6bbb509654e22a1fbf
-
SHA256
a6f8b6661b107082e54d3a418e2df55d7543243e178b99a16a7c35402af58b99
-
SHA512
7ed5782904acace0fc53ecdcb0238b72368f8b3d1c37a581a3542466913b3b41f3fe1c9447b38f6d875b211ef6be2ad7ab127260971a384de199ceb8538c3572
-
SSDEEP
12288:QXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452Uw:2nAw2WWeFcfbP9VPSPMTSPL/rWvzq4JA
-
Darkcomet family
-
Latentbot family
-