General

  • Target

    c5ff5d896fef12ac209060533536abaf_JaffaCakes118

  • Size

    660KB

  • Sample

    241205-fht8bazkhx

  • MD5

    c5ff5d896fef12ac209060533536abaf

  • SHA1

    9f5faa3f4b989e596c676d6bbb509654e22a1fbf

  • SHA256

    a6f8b6661b107082e54d3a418e2df55d7543243e178b99a16a7c35402af58b99

  • SHA512

    7ed5782904acace0fc53ecdcb0238b72368f8b3d1c37a581a3542466913b3b41f3fe1c9447b38f6d875b211ef6be2ad7ab127260971a384de199ceb8538c3572

  • SSDEEP

    12288:QXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452Uw:2nAw2WWeFcfbP9VPSPMTSPL/rWvzq4JA

Malware Config

Extracted

Family

darkcomet

Botnet

Guest16

C2

nekistamos1.zapto.org:82

Mutex

DC_MUTEX-ZQP2D01

Attributes
  • gencode

    y2QC5zXcptF6

  • install

    false

  • offline_keylogger

    true

  • persistence

    false

Extracted

Family

latentbot

C2

nekistamos1.zapto.org

Targets

    • Target

      c5ff5d896fef12ac209060533536abaf_JaffaCakes118

    • Size

      660KB

    • MD5

      c5ff5d896fef12ac209060533536abaf

    • SHA1

      9f5faa3f4b989e596c676d6bbb509654e22a1fbf

    • SHA256

      a6f8b6661b107082e54d3a418e2df55d7543243e178b99a16a7c35402af58b99

    • SHA512

      7ed5782904acace0fc53ecdcb0238b72368f8b3d1c37a581a3542466913b3b41f3fe1c9447b38f6d875b211ef6be2ad7ab127260971a384de199ceb8538c3572

    • SSDEEP

      12288:QXhpvNWw276S/DuoeFcfbmiJ99VPhYR5MTSHvLenELrWv1lZw4JuMkMh/fy452Uw:2nAw2WWeFcfbP9VPSPMTSPL/rWvzq4JA

MITRE ATT&CK Enterprise v15

Tasks